Themegrill vulnerabilities

Products

• User Registration 12
• Colormag 3
• Masteriyo 3
• Masteriyo - Lms 3
• Demo Importer 3
• Himalayas 2
• Maintenance Page 2
• Maintenance Page 2
• Registration Form For Woocommerce 2
• Demo Importer 2
• User Registration Stripe 2
• Zakra 2

Newest

• themegrill user registration WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability CVE-2026-25450 5.3 MediumOctober 29, 2026
• themegrill user registration WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability CVE-2026-25467 5.3 MediumOctober 29, 2026
• themegrill estore WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-108485 7.1 HighOctober 18, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-105882 6.5 MediumOctober 15, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability CVE-2026-109692 7.1 HighOctober 15, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability CVE-2026-109699 5.4 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability CVE-2026-106598 5.3 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-105881 6.5 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-103076 5.4 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability CVE-2026-106597 5.3 MediumOctober 13, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability CVE-2026-96334 5.6 MediumOctober 9, 2026
• themegrill registration form for woocommerce Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id CVE-2026-81431 7.2 HighSeptember 10, 2026
• blockart magazine blocks WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-78290 6.5 MediumAugust 24, 2026
• themegrill smartsmtp WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-66606 7.1 HighAugust 20, 2026
• hugging face accelerate Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation CVE-2025-9266 4.3 MediumAugust 6, 2026
• themegrill zakra Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API CVE-2026-4804 6.4 MediumJuly 3, 2026
• themegrill user registration WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability CVE-2026-52701 6.5 MediumJune 26, 2026
• themegrill registration form for woocommerce WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability CVE-2026-54807 Public exploit 9.8 CriticalJune 17, 2026
• themegrill user registration stripe WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerability CVE-2026-49081 8.2 HighJune 17, 2026
• themegrill user registration stripe WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerability CVE-2026-40726 8.2 HighJune 17, 2026
• masteriyo - lms, themegrill masteriyo - lms +1 more WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability CVE-2026-42743 6.5 MediumJune 15, 2026
• masteriyo - lms, themegrill masteriyo - lms +1 more WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability CVE-2026-39524 7.5 HighJune 15, 2026
• themegrill user registration WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability CVE-2026-25425 7.5 HighJune 15, 2026
• masteriyo - lms, themegrill masteriyo - lms +1 more WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability CVE-2026-49111 8.8 HighJune 15, 2026
• themegrill demo importer WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerability CVE-2026-40730 5.3 MediumApril 15, 2026
• themegrill spacious Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import CVE-2025-9331 4.3 MediumAugust 22, 2025
• themegrill colormag ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation CVE-2025-9202 4.3 MediumAugust 20, 2025
• themegrill zakra Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import CVE-2025-8595 4.3 MediumAugust 6, 2025
• masteriyo - lms, themegrill masteriyo +1 more WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability CVE-2024-33939 5.3 MediumMay 19, 2025
• themegrill demo importer ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset CVE-2020-36837 9.9 CriticalOctober 16, 2024
• themegrill magazine blocks, wpblockart magazine blocks – blog designer, magazine & newspaper website builder, page builder with posts blocks, post grid, blockart blocks +2 more Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting CVE-2024-9218 6.1 MediumOctober 2, 2024
• themegrill himalayas WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-39629 5.9 MediumAugust 1, 2024
• themegrill esteem WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-37432 5.9 MediumJuly 22, 2024
• masteriyo, masteriyo - lms +1 more WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability CVE-2024-24882 9.8 CriticalMay 17, 2024
• themegrill himalayas WordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-34571 6.5 MediumMay 8, 2024
• themegrill colornews WordPress ColorNews theme <= 1.2.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-33540 6.5 MediumApril 29, 2024
• themegrill colormag ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name CVE-2024-2500 6.4 MediumMarch 22, 2024
• themegrill maintenance page Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API CVE-2024-1462 5.3 MediumMarch 13, 2024
• themegrill maintenance page Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure CVE-2024-1370 5.3 MediumMarch 13, 2024
• themegrill colormag ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation CVE-2024-0679 Public exploit 6.5 MediumJanuary 20, 2024
• themegrill masteriyo, unknown lms by masteriyo +1 more LMS by Masteriyo < 1.6.8 - Information Exposure CVE-2023-3345 6.5 MediumJuly 31, 2023
• themegrill demo importer themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database,... CVE-2020-36333 9.1 CriticalMay 5, 2021
• themegrill demo importer themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. CVE-2020-36334 8.8 HighMay 5, 2021