[ Vendor · 7 CVEs ]
themeisle
CVEs affecting themeisle published in the last 30 days, plus any themeisle CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109207 | 16 Oct 2026 | CVSS 7.2 | themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds AggregatorThe RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored… | |
| CVE-2026-104801 | 10 Oct 2026 | CVSS 9.1 | themeisle PPOM – Product Addons & Custom Fields for WooCommerceThe PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path… | |
| CVE-2026-104735 | 10 Oct 2026 | CVSS 6.4 | themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds AggregatorThe RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored… | |
| CVE-2026-97305 | 5 Oct 2026 | CVSS 6.9 | Themeisle AI Chatbot for WordPress – Hyve LiteAuthorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting… | |
| CVE-2026-102002 | 2 Oct 2026 | CVSS 3.1 | themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSEThe Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exposure in… | |
| CVE-2026-62073 | 1 Oct 2026 | CVSS 7.5 | Themeisle WP Full Stripe FreeUnauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions. | |
| CVE-2026-97302 | 30 Sep 2026 | CVSS 5.3 | Themeisle MPGUnauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions. |