Skip to contentThemeisle vulnerabilities
Products
- Redirection For Contact Form 719
- Rss Aggregator By Feedzy – Feed To Post, Autoblogging, News & Youtube Video Feeds Aggregator17
- Orbit Fox15
- Orbit Fox: Duplicate Page, Menu Icons, Svg Support, Cookie Notice, Custom Fonts & More14
- Visualizer14
- Multiple Page Generator Plugin – Mpg11
- Otter Blocks – Gutenberg Blocks, Page Builder For Gutenberg Editor & Fse11
- Multiple Page Generator10
- Otter Blocks10
- Rss Aggregator By Feedzy9
- Visualizer: Tables And Charts Manager For Wordpress8
- Auto Featured Image (auto Post Thumbnail)7
- Wp Full Stripe Free7
- Orbit Fox By Themeisle6
- Mpg5
- Ppom For Woocommerce5
- Ppom – Product Addons & Custom Fields For Woocommerce5
- Product Addons \& Fields For Woocommerce4
- Menu Icons By Themeisle3
- Woody Ad Snippets3
- Ai Chatbot For Wordpress – Hyve Lite2
- Hestia2
- Lightstart – Maintenance Mode, Coming Soon And Landing Page Builder2
- Otter - Gutenberg Block2
- Product Addons & Fields For Woocommerce2
- Stripe Payment Forms By Wp Full Pay – Accept Credit Card Payments, Donations & Subscriptions2
- Visualizer – Tables & Charts Manager With Built-in Ai Generator2
- Woody Code Snippets – Insert Php, Css, Js, And Header/footer Scripts2
Newest
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)CVE-2023-68056.4 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-313015.4 Medium
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site ScriptingCVE-2024-33446.4 Medium
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block AttributesCVE-2024-33436.4 Medium
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-22266.4 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error MessageCVE-2023-68776.4 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerabilityCVE-2024-279519.1 Critical
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-28416.4 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Broken Access Control vulnerabilityCVE-2024-302354.3 Medium
- themeisle visualizerWordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-279587.1 High
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-14996.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attributeCVE-2024-14976.4 Medium
- themeisle otter blocks, themisle otter blocks pro – gutenberg blocks, page builder for gutenberg editor & fse +1 moreOtter Blocks PRO <= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSSCVE-2024-16846.4 Medium
- themeisle otter blocks, themisle otter blocks pro – gutenberg blocks, page builder for gutenberg editor & fse +1 moreOtter Blocks PRO <= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG UploadCVE-2024-16916.1 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form WidgetCVE-2024-21266.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-13236.4 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL InjectionCVE-2024-13178.8 High
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and PublicationCVE-2024-13186.5 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor WidgetCVE-2024-05086.4 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing AuthorizationCVE-2024-10924.3 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request ForgeryCVE-2024-11624.3 Medium
- optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 moreThemeIsle SDK <= Various Versions - Missing AuthorizationCVE-2024-10475.3 Medium
- themeisle lightstart, lightstart – maintenance mode, coming soon and landing page builder +1 moreLightStart – Maintenance Mode, Coming Soon and Landing Page Builder <= 2.6.8 - Missing AuthorizationCVE-2023-70194.3 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fieldsCVE-2023-67816.4 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing AuthorizationCVE-2023-67985.4 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2023-68016.4 Medium
- themeisle cloud templates & patterns collection, cloud templates \& patterns collection +1 moreWordPress Cloud Templates & Patterns collection Plugin <= 1.2.2 is vulnerable to Sensitive Data ExposureCVE-2023-47529Public exploit5.3 Medium
- mammothology wp full stripe freeWordPress WP Full Stripe Free plugin <= 7.0.16 - Cross Site Request Forgery (CSRF) vulnerability on every Setting SaveCVE-2023-476674.3 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL InjectionCVE-2023-339277.6 High
- mammothology wp full stripe freeWordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-460885.9 Medium
- cm-wp woody code snippets, themeisle woody code snippets – insert php, css, js, and header/footer scripts +1 moreWoody code snippets <= 2.3.9 - Cross-Site Request Forgery BypassCVE-2020-367594.3 Medium
- themeisle rss aggregator by feedzy, rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator +1 moreRSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery BypassCVE-2020-367584.3 Medium
- themeisle google maps plugin by intergeoGoogle Maps Plugin by Intergeo <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-48876.4 Medium
- mammothology wp full stripe freeWordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-289345.9 Medium
- themeisle multiple page generator, multiple page generator plugin – mpg +1 moreMultiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL InjectionCVE-2023-26077.2 High
- themeisle orbit fox by themeisle, orbitfox +1 moreOrbit Fox < 2.10.24 - Author+ Server-Side Request ForgeryCVE-2023-22874.3 Medium
- themeisle otterOtter - Gutenberg Blocks < 2.2.6 - Author+ PHAR DeserializationCVE-2023-2288EPSS 18.0%8.8 High
- themeisle product addons & fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site ScriptingCVE-2023-22566.1 Medium
- themeisle multiple page generator, multiple page generator plugin – mpg +1 moreMultiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL InjectionCVE-2023-26083.1 Low
- themeisle product addons & fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site ScriptingCVE-2023-18394.8 Medium
- themeisle visualizer, visualizer: tables and charts manager for wordpress +1 moreWordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-237086.5 Medium
- themeisle visualizer, visualizer: tables and charts manager for wordpress +1 moreWordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)CVE-2022-468486.5 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-471434.3 Medium
- cm-wp auto featured image, themeisle auto featured image (auto post thumbnail) +1 moreAuto Featured Image < 3.9.16 - Author+ Arbitrary File UploadCVE-2023-04778.8 High
- themeisle rss aggregator by feedzyRSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSSCVE-2022-46675.4 Medium
- themeisle visualizer, visualizer: tables and charts manager for wordpress +1 moreVisualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR DeserializationCVE-2022-24448.8 High
- unknown wp maintenance mode & coming soon, themeisle wp maintenance mode \& coming soon +1 moreWP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRFCVE-2022-15766.5 Medium
- redirection-for-contact-form7 redirection for contact form 7Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site ScriptingCVE-2022-02506.1 Medium
- najeebmedia ppom for woocommercePPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSSCVE-2021-250185.4 Medium
- cm-wp auto featured image, themeisle auto featured image (auto post thumbnail) +1 moreAuto Featured Image < 3.9.3 - Reflected Cross-Site ScriptingCVE-2021-249326.1 Medium
- Show moreLoading…