themesgrove vulnerabilities
6 published CVEs name themesgrove among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-46494
WordPress WidgetKit Pro plugin <= 1.13.1 - Reflected Cross Site Scripting (XSS) vulnerability
Themesgrove · WidgetKit Pro
High7.1 - CVE-2025-3851
Download Manager and Payment Form WordPress Plugin – WP SmartPay 1.1.0 - 2.7.13 - Authenticated (Subscriber+) Information Exposure
themesgrove · Download Manager and Payment Form WordPress Plugin – WP SmartPay
Medium4.3 - CVE-2024-37428
WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
Themesgrove · WidgetKit
Medium6.5 - CVE-2024-34548
WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability
Themesgrove · WidgetKit
Medium6.5 - CVE-2024-33908
WordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability
Themesgrove · WidgetKit
Medium5.3 - CVE-2023-38391
WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection
Themesgrove · Onepage Builder
Medium6.7