[ Vendor · 4 CVEs ]
themifyme
CVEs affecting themifyme published in the last 30 days, plus any themifyme CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111726 | 17 Oct 2026 | CVSS 6.4 | themifyme Themify BuilderThe Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible' Shortcode Attribute in all versions up to, and… | |
| CVE-2026-109989 | 17 Oct 2026 | CVSS 6.4 | themifyme Themify PopupThe Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_width_unit' parameter in all versions up to, and… | |
| CVE-2026-96831 | 30 Sep 2026 | CVSS 8.8 | themifyme Themify BuilderContributor PHP Object Injection in Themify Builder <= 7.8.1 versions. | |
| CVE-2026-95864 | 25 Sep 2026 | CVSS 7.2 | themifyme Themify BuilderThe Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[fonts]' Parameter in all versions up to, and… |