Themelooks vulnerabilities

Products

• Enter Addons 8
• Enter Addons 5
• Enter Addons – Ultimate Template Builder For Elementor 5
• Mfolio Lite 2

Newest

• themelooks foodbook lite – online food ordering system FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action CVE-2026-11802 5.3 MediumJuly 14, 2026
• themelooks enter addons WordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-25014 4.3 MediumFebruary 3, 2026
• themelooks enter addons – ultimate template builder for elementor Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets CVE-2025-8687 6.4 MediumDecember 13, 2025
• themelooks foodbook WordPress FoodBook Plugin <= 4.7.6 - Sensitive Data Exposure Vulnerability CVE-2025-60125 5.3 MediumSeptember 26, 2025
• themelooks mfolio lite WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-31847 6.5 MediumApril 1, 2025
• themelooks enter addons WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-56252 6.5 MediumJanuary 2, 2025
• themelooks enter addons – ultimate template builder for elementor, enter addons +1 more Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure CVE-2024-10868 4.3 MediumNovember 23, 2024
• themelooks mfolio, mfolio lite +1 more mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files CVE-2024-9307 9.9 CriticalNovember 6, 2024
• themelooks enter addons WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-47625 6.5 MediumOctober 5, 2024
• themelooks enter addons – ultimate template builder for elementor, enter addons +1 more Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget CVE-2024-7611 6.4 MediumSeptember 6, 2024
• themelooks enter addons WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-43225 6.5 MediumAugust 12, 2024
• themelooks enter addons WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-37263 6.5 MediumJuly 22, 2024
• themelooks enter addons – ultimate template builder for elementor, enter addons +1 more Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget CVE-2024-3831 6.4 MediumMay 9, 2024
• themelooks enter addons – ultimate template builder for elementor, enter addons +1 more Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag CVE-2024-3680 6.4 MediumMay 9, 2024