Skip to contentThemeisle vulnerabilities
Products
- Redirection For Contact Form 719
- Rss Aggregator By Feedzy – Feed To Post, Autoblogging, News & Youtube Video Feeds Aggregator17
- Orbit Fox15
- Orbit Fox: Duplicate Page, Menu Icons, Svg Support, Cookie Notice, Custom Fonts & More14
- Visualizer14
- Multiple Page Generator Plugin – Mpg11
- Otter Blocks – Gutenberg Blocks, Page Builder For Gutenberg Editor & Fse11
- Multiple Page Generator10
- Otter Blocks10
- Rss Aggregator By Feedzy9
- Visualizer: Tables And Charts Manager For Wordpress8
- Auto Featured Image (auto Post Thumbnail)7
- Wp Full Stripe Free7
- Orbit Fox By Themeisle6
- Mpg5
- Ppom For Woocommerce5
- Ppom – Product Addons & Custom Fields For Woocommerce5
- Product Addons \& Fields For Woocommerce4
- Menu Icons By Themeisle3
- Woody Ad Snippets3
- Ai Chatbot For Wordpress – Hyve Lite2
- Hestia2
- Lightstart – Maintenance Mode, Coming Soon And Landing Page Builder2
- Otter - Gutenberg Block2
- Product Addons & Fields For Woocommerce2
- Stripe Payment Forms By Wp Full Pay – Accept Credit Card Payments, Donations & Subscriptions2
- Visualizer – Tables & Charts Manager With Built-in Ai Generator2
- Woody Code Snippets – Insert Php, Css, Js, And Header/footer Scripts2
Newest
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregatorRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request ForgeryCVE-2025-114675.8 Medium
- themeisle visualizer: tables and charts manager for wordpressVisualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL InjectionCVE-2025-124836.5 Medium
- themeisle ppom for woocommerceWordPress PPOM for WooCommerce plugin <= 33.0.16 - Broken Access Control vulnerabilityCVE-2025-660694.3 Medium
- themeisle orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post TaxonomyCVE-2025-120456.4 Medium
- themeisle stripe payment forms by wp full pay – accept credit card payments, donations & subscriptionsStripe Payment Forms <= 8.3.1 - Unauthenticated SQL InjectionCVE-2025-93227.5 High
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregatorFeedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2025-111285.0 Medium
- themeisle ppom – product addons & custom fields for woocommercePPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL InjectionCVE-2025-116917.5 High
- themeisle ppom – product addons & custom fields for woocommercePPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File UploadCVE-2025-11391Public exploit9.8 Critical
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date ShortcodeCVE-2025-95626.4 Medium
- themeisle wp full stripe freeWordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection VulnerabilityCVE-2025-58789Public exploit7.6 High
- themeisle orbit fox by themeisleWordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-585936.5 Medium
- themeisle otter - gutenberg blockWordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure VulnerabilityCVE-2025-557157.5 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR DeserializationCVE-2025-82897.5 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File DeletionCVE-2025-81418.8 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object InjectionCVE-2025-81458.8 High
- themeisle hestiaWordPress Hestia theme <= 3.2.10 - Broken Access Control VulnerabilityCVE-2025-539865.3 Medium
- themeisle cyrliteraWordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-532544.3 Medium
- themeisle orbit fox by themeisle, orbit fox +1 moreWordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-226596.5 Medium
- themeisle visualizer: tables and charts manager for wordpressVisualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From FileCVE-2025-10656.4 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreMultiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrlCVE-2024-107055.4 Medium
- themeisle ai chatbot for wordpress – hyve liteWordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-246665.9 Medium
- themeisle ppom for woocommerceWordPress PPOM for WooCommerce plugin <= 33.0.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-246685.9 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag ParameterCVE-2024-131836.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table WidgetCVE-2025-03116.4 Medium
- themeisle hestiaWordPress Hestia theme <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-374674.3 Medium
- themeisle redirection for contact form 7WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerabilityCVE-2023-399207.5 High
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image ViewCVE-2024-112195.3 Medium
- creative motion disable admin notices individuallyWordPress Disable Admin Notices individually plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-524204.3 Medium
- themeisle otter - gutenberg blockWordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerabilityCVE-2024-516712.7 Low
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreMultiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File DeletionCVE-2024-106722.7 Low
- creative motion auto featured image (auto post thumbnail)WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerabilityCVE-2024-387194.3 Medium
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fseOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-103676.4 Medium
- themeisle multiple page generator plugin – mpgMultiple Page Generator Plugin – MPG <= 4.0.1 - Missing AuthorizationCVE-2024-74245.4 Medium
- themeisle mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.7 - SQL Injection vulnerabilityCVE-2024-473258.5 High
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-77786.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid WidgetsCVE-2024-24846.4 Medium
- themeisle woody code snippets – insert php, css, js, and header/footer scripts, webcraftic woody ad snippets +1 moreWoody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 -Authenticated (Contributor+) Remote Code ExecutionCVE-2024-3105Public exploit9.9 Critical
- themeisle ppom for woocommerce, product addons \& fields for woocommerce +1 moreWordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerabilityCVE-2024-357285.3 Medium
- themeisle otter blocks pro, otter blocks +1 moreWordPress Otter Blocks PRO plugin <= 2.6.11 - Authenticated Sensitive Data Exposure vulnerabilityCVE-2024-356824.3 Medium
- themeisle visualizerWordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerabilityCVE-2024-357368.5 High
- cm-wp woody code snippets, creative motion, will bontrager software, llc woody ad snippets +1 moreWordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-357516.5 Medium
- creative motion auto featured image, themeisle auto featured image (auto post thumbnail) +1 moreAuto Featured Image (Auto Post Thumbnail) <= 4.1.7 - Authenticated (Author+) Server-Side Request ForgeryCVE-2023-70736.4 Medium
- qube one ltd. redirection for contact form 7WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerabilityCVE-2023-239907.6 High
- themeisle menu icons by themeisleMenu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadCVE-2024-46356.4 Medium
- themeisle visualizer: tables and charts manager for wordpressVisualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL ExecutionCVE-2024-37508.8 High
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag'CVE-2024-37256.4 Medium
- creative motion auto featured image (auto post thumbnail)WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.0.0 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-336294.4 Medium
- themeisle ppom – product addons & custom fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_fileCVE-2024-39629.8 Critical
- themeisle otter blocksOtter Blocks < 2.6.6 - Contributor+ Stored XSSCVE-2024-27296.1 Medium
- Show moreLoading…