Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: themebon Clear all filters
TI-2025-42833 CVE-2025-69390 · GHSA-279c-6crv-5wxc

Cross-site scripting in themebon Business Template Blocks for WPBakery Page Builder

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Business Template Blocks for WPBakery (Visual Composer) Page Builder templates-and-addons-for-wpbakery-page-b…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00208 Published 2026-02-20 No fix listed CWE-79
TI-2025-12901 CVE-2025-14119 · GHSA-959g-cxh7-672v

Cross-site scripting in themebon App Landing Template Blocks for WPBakery Page Builder

Priority LOW 28

The App Landing Template Blocks for WPBakery (Visual Composer) Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc_video_play' shortcode in all versions up to, and including, 2.0.…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00216 Published 2025-12-12 No fix listed CWE-79
TI-2025-36649 CVE-2025-59006 · GHSA-qwqf-r42p-wxrq

WordPress Easy Woocommerce Customizer plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Easy Woocommerce Customizer easy-woocommerce-customizer allows Reflected XSS.This issue affects Easy Woocomme…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00235 Published 2025-10-22 No fix listed CWE-79
TI-2025-16471 CVE-2025-22585 · GHSA-86xp-9w89-4h5q

WordPress Ultimate Image Hover Effects plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Ultimate Image Hover Effects ultimate-image-hover-effects allows DOM-Based XSS.This issue affects Ultimate Im…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-07 No fix listed CWE-79