Themepul

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Themepul records in CISA KEV

No Themepul vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-42300 CVE-2025-68841 · GHSA-3h5g-fffj-jhx9

WordPress TopperPack – Complete Elementor Addons, theme & CPT Builder plugin <= 1.2.1…

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themepul TopperPack – Complete Elementor Addons, Theme & CPT Builder topper-pack allows PHP Local F…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00445 Published 2026-02-20 No fix listed CWE-98

TI-2026-00805 CVE-2026-1073 · GHSA-q3hq-vr59-65q2

Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update

LOW 19

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00147 Published 2026-03-07 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0