Themifyme Themify Builder vulnerabilities

• themifyme themify builder Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Field CVE-2026-115869 6.4 MediumOctober 30, 2026
• themifyme themify builder Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute CVE-2026-111726 6.4 MediumOctober 17, 2026
• themifyme themify builder WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability CVE-2026-96831 8.8 HighSeptember 30, 2026
• themifyme themify builder Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter CVE-2026-95864 7.2 HighSeptember 25, 2026
• themifyme themify builder Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action CVE-2026-75027 5.3 MediumAugust 22, 2026
• themifyme themify builder Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action CVE-2026-15407 4.3 MediumJuly 16, 2026
• themifyme themify builder WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-57369 7.1 HighJuly 13, 2026
• themifyme themify builder Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field CVE-2026-15096 6.4 MediumJuly 11, 2026
• themifyme themify builder Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field CVE-2026-15097 6.4 MediumJuly 11, 2026
• themifyme themify builder Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9353 6.4 MediumSeptember 24, 2025
• themifyme themify builder WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability CVE-2025-49396 4.3 MediumAugust 20, 2025
• themify builder, themifyme themify builder +1 more Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting CVE-2024-13319 6.1 MediumJanuary 22, 2025
• themify builder, themifyme themify builder +1 more WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability CVE-2024-56216 6.5 MediumDecember 31, 2024
• themify builder, themifyme themify builder +1 more WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-52423 6.5 MediumNovember 18, 2024
• themify builder, themifyme themify builder +1 more Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting CVE-2024-9385 6.1 MediumOctober 5, 2024
• themify builder, themifyme themify builder +1 more Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication CVE-2024-7836 4.3 MediumAugust 22, 2024
• themify builder, themifyme themify builder +1 more Themify Builder < 7.5.8 - Open Redirect CVE-2024-3032 6.1 MediumJune 13, 2024
• themify builder, themifyme themify builder +1 more WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2024-24872 4.3 MediumFebruary 21, 2024