themeisle Vulnerability Advisory Catalog

Total 61 security vulnerabilities recorded for themeisle software and firmware.

← Back to All Vendors
Component: visualizer

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Reflected XSS.This i...

📅 2024-03-17
CVSS 7.1 Dossier →
CVE-2024-2126 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form widget in all versions up to, a...

📅 2024-03-13
CVSS 6.4 Dossier →
CVE-2024-1691 MEDIUM
Component: otter_blocks

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

📅 2024-03-13
CVSS 6.1 Dossier →
CVE-2024-1684 MEDIUM
Component: otter_blocks

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

📅 2024-03-13
CVSS 6.4 Dossier →
CVE-2024-1499 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in the $settings['title_tag...

📅 2024-03-13
CVSS 6.4 Dossier →
CVE-2024-1497 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget addr2_width attribute in all versions...

📅 2024-03-13
CVSS 6.4 Dossier →
CVE-2024-1318 MEDIUM
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized mo...

📅 2024-02-29
CVSS 6.5 Dossier →
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to SQL Injection v...

📅 2024-02-29
CVSS 8.8 Dossier →
CVE-2024-1323 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Type Grid Widget Title in all versi...

📅 2024-02-27
CVSS 6.4 Dossier →
CVE-2024-1092 MEDIUM
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized da...

📅 2024-02-05
CVSS 4.3 Dossier →
CVE-2024-0508 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table Elementor Widget in all ve...

📅 2024-02-05
CVSS 6.4 Dossier →
CVE-2024-1162 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10.29. This is due...

📅 2024-02-02
CVSS 4.3 Dossier →
CVE-2024-1047 MEDIUM
Component: orbit_fox

Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability ch...

📅 2024-02-02
CVSS 5.3 Dossier →
CVE-2023-7019 MEDIUM
Component: lightstart

The LightStart – Maintenance Mode, Coming Soon and Landing Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to...

📅 2024-01-11
CVSS 4.3 Dossier →
CVE-2023-6781 MEDIUM
Component: orbit_fox

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom fields in all versions up to, and...

📅 2024-01-11
CVSS 6.4 Dossier →
CVE-2023-6801 MEDIUM
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Si...

📅 2024-01-06
CVSS 6.4 Dossier →
CVE-2023-6798 MEDIUM
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized se...

📅 2024-01-06
CVSS 5.4 Dossier →
Component: cloud_templates_\&_patterns_collection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud T...

📅 2023-11-23
CVSS 5.3 Dossier →
Component: multiple_page_generator

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG m...

📅 2023-10-31
CVSS 7.6 Dossier →
Component: rss_aggregator_by_feedzy

The RSS Aggregator by Feedzy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.2. This is due to ...

📅 2023-10-20
CVSS 4.3 Dossier →
CVE-2023-4887 MEDIUM
Component: google_maps_plugin_by_intergeo

The Google Maps Plugin by Intergeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and i...

📅 2023-09-12
CVSS 6.4 Dossier →
Component: multiple_page_generator

The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions up to, and...

📅 2023-06-09
CVSS 7.2 Dossier →
Component: otter

The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a P...

📅 2023-05-30
CVSS 8.8 Dossier →
CVE-2023-2287 MEDIUM
Component: orbitfox

The Orbit Fox by ThemeIsle WordPress plugin before 2.10.24 does not limit URLs which may be used for the stock photo import feature, allowing the user...

📅 2023-05-30
CVSS 4.3 Dossier →
Page 2 of 3 (61 Total Records)