Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Vendor: MyThemeShop Clear all filters
TI-2026-08463 CVE-2026-9635 · GHSA-q9pq-xp5c-jmhr

Cross-site scripting in MyThemeShop WP Shortcode by MyThemeShop

Priority LOW 28

The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the [tab] shortcode in versions up to, and including, 1.4.17.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2026-07-23 No fix listed CWE-79
TI-2026-19763 CVE-2026-24522 · GHSA-mj6r-gcrw-4vfv

WordPress WP Subscribe plugin <= 1.2.16 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscribe: from n/a through <= 1.2.16.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-01-23 No fix listed CWE-862
TI-2025-07711 CVE-2025-8425 · GHSA-86xc-qvrm-8qrj

My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 40

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_import_strings() function in all versions up…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00311 Published 2025-09-11 No fix listed CWE-862
TI-2025-07709 CVE-2025-8423 · GHSA-643q-prw4-99r6

My WP Translate <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and Deletion

Priority LOW 24

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mtswpt_remove_plugin() and ajax_update_export_code() functions in all versions up to, a…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00352 Published 2025-09-11 No fix listed CWE-862
TI-2025-29200 CVE-2025-46482 · GHSA-v22r-2c57-5frw

WordPress WP Quiz plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz wp-quiz allows Stored XSS.This issue affects WP Quiz: from n/a through <= 2.0.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-04-25 No fix listed CWE-79
TI-2024-05379 CVE-2024-5802 · GHSA-83m5-8929-p3h9

URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS

Priority LOW 27

The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00403 Published 2024-07-09 No fix listed CWE-79
TI-2019-05274 CVE-2019-7411 · GHSA-qq4g-x6rf-6p73

Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for…

Priority LOW 26

Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: (1) Title, (2) Favicon, (3)…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00907 Published 2019-05-13 No fix listed CWE-79