Read the docs

Themefic

Records60All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

Themefic records in CISA KEV

No Themefic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ultimate Addons For Contact Form 7 10 records MEDIUM Tourfic 6 records MEDIUM Instantio 1 record LOW Ultimate Before After Image Slider & Gallery 1 record MEDIUM

Records

1 record in Ultimate Before After Image Slider & Gallery · all components

TI-2025-30046 CVE-2025-47549 · GHSA-3xgc-7mw7-pvhp

WordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF beaf-before-and-after-gallery allows Upload a Web Shell to a Web Server.This issue affects BEAF: from n/a through <= 4.6.10.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00552 Published 2025-05-07 No fix listed CWE-434
Open these records in search →