Read the docs

themifyme

Records63All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

themifyme records in CISA KEV

No themifyme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Builder 6 records MEDIUM Portfolio Post 5 records MEDIUM Ultra 5 records HIGH Woocommerce Product Filter 5 records MEDIUM Themify Shortcodes 3 records LOW Conditional Menus 1 record MEDIUM Framework 1 record MEDIUM Icons 1 record LOW

Records

3 records in Themify Shortcodes · all components

TI-2024-04253 CVE-2024-4567 · GHSA-jg74-2mhw-68mr

Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode

Priority LOW 29

The Themify Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themify_button shortcode in all versions up to, and including, 2.0.9 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00385 Published 2024-05-09 No fix listed CWE-79
TI-2024-02545 CVE-2024-2732 · GHSA-7cjq-2rfg-72jf

Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 24

The Themify Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'themify_post_slider shortcode in all versions up to, and including, 2.0.8 due to insufficient input sanitization…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0034 Published 2024-03-26 No fix listed CWE-79
Open these records in search →