Themes4WP vulnerabilities
6 published CVEs name Themes4WP among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-25422
WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability
Themes4WP · Popularis Extra
Medium5.4 - CVE-2025-26867
WordPress Bulk theme <= 1.0.11 - Broken Access Control vulnerability
Themes4WP · Bulk
Medium5.3 - CVE-2024-38763
WordPress Popularis Verse theme <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability
themes4wp · Popularis Verse
Medium4.3 - CVE-2024-10795
Popularis Extra <= 1.2.7 - Authenticated (Contributor+) Post Disclosure
themes4wp · Popularis Extra
Medium4.3 - CVE-2024-50470
WordPress Themes4WP YouTube External Subtitles plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Themes4WP · Themes4WP YouTube External Subtitles
Medium6.5 - CVE-2024-9353
Popularis Extra <= 1.2.6 - Reflected Cross-Site Scripting
themes4wp · Popularis Extra
Medium6.1