themeisle Vulnerability Advisory Catalog

Total 61 security vulnerabilities recorded for themeisle software and firmware.

← Back to All Vendors
Component: orbit_fox

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-compa...

๐Ÿ“… 2025-03-27
CVSS 6.5 Dossier →
Component: multiple_page_generator

The Multiple Page Generator Plugin โ€“ MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5...

๐Ÿ“… 2025-01-26
CVSS 5.4 Dossier →
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the โ€˜title_tagโ€™ parameter in all versions up to, and ...

๐Ÿ“… 2025-01-10
CVSS 6.4 Dossier →
CVE-2025-0311 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table widget in all versions up ...

๐Ÿ“… 2025-01-10
CVSS 6.4 Dossier →
Component: otter_blocks

The Otter Blocks โ€“ Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Path Traversal in all versions up t...

๐Ÿ“… 2024-11-27
CVSS 5.3 Dossier →
Component: multiple_page_generator

The Multiple Page Generator Plugin โ€“ MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the...

๐Ÿ“… 2024-11-12
CVSS 2.7 Dossier →
Component: multiple_page_generator

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-portha...

๐Ÿ“… 2024-10-20
CVSS 8.5 Dossier →
CVE-2024-7778 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including...

๐Ÿ“… 2024-08-22
CVSS 6.4 Dossier →
CVE-2024-2484 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versio...

๐Ÿ“… 2024-06-22
CVSS 6.4 Dossier →
Component: product_addons_\&_fields_for_woocommerce

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Themeisle PPOM for WooCommerce all...

๐Ÿ“… 2024-06-10
CVSS 5.3 Dossier →
Component: otter_blocks

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Themeisle Otter Blocks PRO.This issue affects Otter Blocks PRO: from n/a t...

๐Ÿ“… 2024-06-08
CVSS 4.3 Dossier →
Component: visualizer

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer.This issue affects Visualiz...

๐Ÿ“… 2024-06-08
CVSS 8.5 Dossier →
CVE-2024-3725 MEDIUM
Component: otter_blocks

The Otter Blocks โ€“ Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

๐Ÿ“… 2024-05-02
CVSS 6.4 Dossier →
CVE-2024-3962 CRITICAL
Component: product_addons_\&_fields_for_woocommerce

The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pp...

๐Ÿ“… 2024-04-26
CVSS 9.8 Dossier →
CVE-2024-2729 MEDIUM
Component: otter_blocks

The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered ...

๐Ÿ“… 2024-04-18
CVSS 6.1 Dossier →
CVE-2023-6805 MEDIUM
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy โ€“ Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Si...

๐Ÿ“… 2024-04-17
CVSS 6.4 Dossier →
Component: multiple_page_generator

Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin โ€“ MPG.This issue affects Multiple Page Generator Plugin โ€“ ...

๐Ÿ“… 2024-04-12
CVSS 5.4 Dossier →
CVE-2024-3344 MEDIUM
Component: otter_blocks

The Otter Blocks โ€“ Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG...

๐Ÿ“… 2024-04-11
CVSS 6.4 Dossier →
CVE-2024-3343 MEDIUM
Component: otter_blocks

The Otter Blocks โ€“ Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

๐Ÿ“… 2024-04-11
CVSS 6.4 Dossier →
CVE-2024-2226 MEDIUM
Component: otter_blocks

The Otter Blocks โ€“ Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

๐Ÿ“… 2024-04-09
CVSS 6.4 Dossier →
CVE-2023-6877 MEDIUM
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy โ€“ Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Si...

๐Ÿ“… 2024-04-07
CVSS 6.4 Dossier →
CVE-2024-27951 CRITICAL
Component: multiple_page_generator

Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin โ€“ MPG allows Upload a Web Shell to a Web Ser...

๐Ÿ“… 2024-04-03
CVSS 9.1 Dossier →
CVE-2024-2841 MEDIUM
Component: otter_blocks

The Otter Blocks โ€“ Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

๐Ÿ“… 2024-03-29
CVSS 6.4 Dossier →
Component: multiple_page_generator

Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin โ€“ MPG.This issue affects Multiple Page Generator Plugin โ€“ MPG: from n/...

๐Ÿ“… 2024-03-26
CVSS 4.3 Dossier →
Page 1 of 3 (61 Total Records)