Themify

Builder

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-49396

  • EPSS 0.04%
  • Veröffentlicht 20.08.2025 08:03:51
  • Zuletzt bearbeitet 20.08.2025 14:39:07

Missing Authorization vulnerability in themifyme Themify Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Themify Builder: from n/a through 7.6.7.

6.5

CVE-2024-56216

  • EPSS 0.37%
  • Veröffentlicht 31.12.2024 10:15:10
  • Zuletzt bearbeitet 07.02.2025 15:43:48

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themify Themify Builder allows PHP Local File Inclusion.This issue affects Themify Builder: from n/a through 7.6.3.

5.4

CVE-2024-52423

  • EPSS 0.16%
  • Veröffentlicht 18.11.2024 16:15:26
  • Zuletzt bearbeitet 20.11.2024 14:56:13

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themify Themify Builder allows Stored XSS.This issue affects Themify Builder: from n/a through 7.6.3.

6.1

CVE-2024-9385

  • EPSS 2.57%
  • Veröffentlicht 05.10.2024 02:15:02
  • Zuletzt bearbeitet 07.02.2025 17:57:17

The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 7.6.2. This makes it possible for unauthenticated a...

4.3

CVE-2024-7836

  • EPSS 0.33%
  • Veröffentlicht 22.08.2024 03:15:04
  • Zuletzt bearbeitet 20.11.2024 15:09:34

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicate_page_ajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with...

6.1

CVE-2024-3032

Exploit
  • EPSS 2.48%
  • Veröffentlicht 13.06.2024 06:15:11
  • Zuletzt bearbeitet 17.03.2025 18:15:17

Themify Builder WordPress plugin before 7.5.8 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue

8.8

CVE-2024-24872

  • EPSS 0.07%
  • Veröffentlicht 21.02.2024 07:15:55
  • Zuletzt bearbeitet 07.02.2025 19:15:46

Cross-Site Request Forgery (CSRF) vulnerability in Themify Themify Builder.This issue affects Themify Builder: from n/a through 7.0.5.