Ithemes vulnerabilities

Products

• Backupbuddy 6
• Security 2

Newest

• ithemes serverbuddy by pluginbuddy.com WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability CVE-2025-49895 6.5 MediumAugust 16, 2025
• ithemes wpcomplete WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45825 7.1 HighMarch 28, 2023
• ithemes backupbuddy WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal CVE-2022-31474 EPSS 63.8% 7.5 HighMarch 13, 2023
• ithemes backupbuddy BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting CVE-2022-4897 6.1 MediumFebruary 21, 2023
• ithemes security The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not... CVE-2020-36176 7.5 HighJanuary 6, 2021
• ithemes paypal pro The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection. CVE-2020-14092 EPSS 94.5% 9.8 CriticalJuly 2, 2020
• ithemes builder style manager iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and... CVE-2015-9379 6.1 MediumAugust 28, 2019
• ithemes builder theme market iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and... CVE-2015-9378 6.1 MediumAugust 28, 2019
• ithemes builder theme depot iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and... CVE-2015-9377 6.1 MediumAugust 28, 2019
• ithemes mobile iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg(). CVE-2015-9376 6.1 MediumAugust 28, 2019
• ithemes table rate shipping Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via... CVE-2015-9375 6.1 MediumAugust 28, 2019
• ithemes stripe Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and... CVE-2015-9374 6.1 MediumAugust 28, 2019
• ithemes membership Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and... CVE-2015-9372 6.1 MediumAugust 28, 2019
• ithemes manual purchases Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg... CVE-2015-9371 6.1 MediumAugust 28, 2019
• ithemes invoices Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and... CVE-2015-9370 6.1 MediumAugust 28, 2019
• ithemes easy us sales taxes Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via... CVE-2015-9369 6.1 MediumAugust 28, 2019
• ithemes easy eu value added \(vat\) taxes Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS... CVE-2015-9368 6.1 MediumAugust 28, 2019
• ithemes easy canadian sales taxes Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via... CVE-2015-9367 6.1 MediumAugust 28, 2019
• ithemes custom url tracking Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via... CVE-2015-9366 6.1 MediumAugust 28, 2019
• ithemes authorize.net Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg()... CVE-2015-9365 6.1 MediumAugust 28, 2019
• ithemes exchange iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). CVE-2015-9363 6.1 MediumAugust 28, 2019
• ithemes security The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection ... CVE-2018-12636 Public exploit EPSS 28.8% 7.2 HighJune 22, 2018
• ithemes security The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping... CVE-2018-7433 7.5 HighMarch 2, 2018
• ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain... CVE-2013-2744 5.0 MediumApril 2, 2013
• ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress... CVE-2013-2743 7.5 HighApril 2, 2013
• ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress... CVE-2013-2742 7.5 HighApril 2, 2013
• ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress... CVE-2013-2741 7.5 HighApril 2, 2013