Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Themeisle vulnerabilities

124 published CVEs name Themeisle among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-124420

    WordPress Woody ad snippets plugin <= 2.7.10 - Cross Site Scripting (XSS) vulnerability

    Themeisle · Woody ad snippets

    High7.1
  • CVE-2026-121519

    Social Slider Feed <= 2.3.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter

    themeisle · Social Slider Feed – Social Media Feed & Gallery Widgets

    Medium6.4
  • CVE-2026-120035

    RSS Aggregator by Feedzy <= 5.2.13 - Unauthenticated Stored Cross-Site Scripting via Feed Item Title

    themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

    Medium5.4
  • CVE-2026-120659

    Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' Parameter

    themeisle · Redirection for Contact Form 7

    Medium5.3
  • CVE-2026-119054

    Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url

    Themeisle · Multiple Pages Generator by Themeisle

    Medium5.1
  • CVE-2026-110707

    RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element

    themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

    Medium4.7
  • CVE-2026-109207

    RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL

    themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

    High7.2
  • CVE-2026-104801

    PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter

    themeisle · PPOM – Product Addons & Custom Fields for WooCommerce

    Critical9.1
  • CVE-2026-104735

    RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>

    themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

    Medium6.4
  • CVE-2026-97305

    WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

    Themeisle · AI Chatbot for WordPress – Hyve Lite

    Medium6.9
All 124 in the list