ThemeHunk vulnerabilities
39 published CVEs name ThemeHunk among the affected products.
- 39Published CVEs39 of them scored
- 14Last 12 monthspublished in the last year
- 4Critical12 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111838
WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability
ThemeHunk · ThemeHunk Customizer
High7.1 - CVE-2026-105883
WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability
ThemeHunk · Th Shop Mania
High7.1 - CVE-2026-66607
WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
ThemeHunk · Advance Product Search
High7.1 - CVE-2026-12753
Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection via 's' and 'match' Parameter
themehunk · Advance Product Search- Voice & Ajax Search for WooCommerce
High7.5 - CVE-2026-57405
WordPress Open Shop theme <= 1.7.1 - Broken Access Control vulnerability
themehunk · Open Shop
High7.1 - CVE-2026-14250
Themehunk Login Registration <= 1.0.2 - Unauthenticated Privilege Escalation via 'role' Parameter
themehunk · TH Login Registration
Medium6.3 - CVE-2026-56070
WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability
ThemeHunk · Advance Product Search
Critical9.3 - CVE-2023-25969
WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken Access Control vulnerability
ThemeHunk · Contact Form & Lead Form Elementor Builder
Medium5.4 - CVE-2026-32532
WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
ThemeHunk · Contact Form & Lead Form Elementor Builder
High7.1 - CVE-2026-25438
WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
ThemeHunk · Gutenberg Blocks
High7.1