[ Vendor · 6 CVEs ]
themefic
CVEs affecting themefic published in the last 30 days, plus any themefic CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97470 | 16 Oct 2026 | CVSS 6.4 | themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car RentalThe Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment… | |
| CVE-2026-103999 | 16 Oct 2026 | CVSS 7.2 | themefic Ultra Addons for Contact Form 7The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to, and… | |
| CVE-2026-103480 | 16 Oct 2026 | CVSS 6.4 | themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car RentalThe Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type'… | |
| CVE-2026-96833 | 30 Sep 2026 | CVSS 7.2 | Themefic Ultimate Addons for Contact Form 7Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions. | |
| CVE-2026-82901 | 26 Sep 2026 | CVSS 9.8 | themefic Ultra Addons for Contact Form 7The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the… | |
| CVE-2026-95586 | 23 Sep 2026 | CVSS 6.5 | Themefic Ultimate Addons for Contact Form 7Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions. |