Themify

Themify Builder

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-96831

  • EPSS 0.36%
  • Veröffentlicht 30.09.2026 12:27:42
  • Zuletzt bearbeitet 30.09.2026 14:18:12

Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

7.2

CVE-2026-95864

  • EPSS 0.27%
  • Veröffentlicht 25.09.2026 07:40:31
  • Zuletzt bearbeitet 25.09.2026 14:17:25

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[fonts]' Parameter in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauth...

4.3

CVE-2026-15407

  • EPSS 0.29%
  • Veröffentlicht 16.07.2026 07:51:04
  • Zuletzt bearbeitet 18.07.2026 03:16:35

The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for au...

7.1

CVE-2026-57369

  • EPSS 0.18%
  • Veröffentlicht 13.07.2026 08:41:23
  • Zuletzt bearbeitet 13.07.2026 16:57:56

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Reflected XSS.This issue affects Themify Builder: from n/a through <= 7.7.4.

6.4

CVE-2026-15096

  • EPSS 0.19%
  • Veröffentlicht 11.07.2026 03:44:23
  • Zuletzt bearbeitet 13.07.2026 17:17:03

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field in all versions up to, and including, 7.7.6 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.4

CVE-2026-15097

  • EPSS 0.2%
  • Veröffentlicht 11.07.2026 03:44:20
  • Zuletzt bearbeitet 15.07.2026 14:17:17

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider Module Field in all versions up to, and including, 7.7.6 due to insufficient input sanitization and output escaping. This makes it possib...

6.4

CVE-2025-9353

  • EPSS 0.3%
  • Veröffentlicht 24.09.2025 13:15:37
  • Zuletzt bearbeitet 26.09.2026 00:10:00

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 7.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authentica...

6.1

CVE-2024-13319

  • EPSS 0.29%
  • Veröffentlicht 22.01.2025 08:15:08
  • Zuletzt bearbeitet 24.01.2025 21:06:34

The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 7.6.5. This makes it possible for unauthenticated a...