Skip to content
Themeisle Visualizer vulnerabilities
-
themeisle visualizer
Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source
CVE-2026-86784
6.8 Medium
-
themeisle visualizer
Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
CVE-2026-86782
5.5 Medium
-
themeisle visualizer
Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart
CVE-2026-86779
2.7 Low
-
themeisle visualizer
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
CVE-2026-19726
6.5 Medium
-
themeisle visualizer
Visualizer: Tables and Charts Manager < 4.0.6 - Contributor+ Server-Side Request Forgery via JSON Import
CVE-2026-14939
6.8 Medium
-
themeisle visualizer – tables & charts manager with built-in ai generator
Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter
CVE-2026-15653
6.4 Medium
-
themeisle visualizer
WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
CVE-2026-65526
8.5 High
-
themeisle visualizer – tables & charts manager with built-in ai generator
Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint
CVE-2026-13468
7.5 High
-
themeisle visualizer: tables and charts manager for wordpress
Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData()…
CVE-2026-8689
4.3 Medium
-
themeisle visualizer
WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24573
6.5 Medium
-
themeisle visualizer: tables and charts manager for wordpress
Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection
CVE-2025-12483
6.5 Medium
-
themeisle visualizer: tables and charts manager for wordpress
Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File
CVE-2025-1065
6.4 Medium
-
themeisle visualizer
WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability
CVE-2024-35736
8.5 High
-
themeisle visualizer: tables and charts manager for wordpress
Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Execution
CVE-2024-3750
8.8 High
-
themeisle visualizer
WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-27958
7.1 High
-
optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 more
ThemeIsle SDK <= Various Versions - Missing Authorization
CVE-2024-1047
5.3 Medium
-
themeisle visualizer, visualizer: tables and charts manager for wordpress +1 more
WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-23708
6.5 Medium
-
themeisle visualizer, visualizer: tables and charts manager for wordpress +1 more
WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-46848
6.5 Medium
-
themeisle visualizer, visualizer: tables and charts manager for wordpress +1 more
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
CVE-2022-2444
8.8 High
-
themeisle visualizer
A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated...
CVE-2019-16931
6.1 Medium
-
themeisle visualizer
A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json...
CVE-2019-16932
EPSS 39.0%
10.0 Critical