Skip to content
OpenAdvisories

Vendor

themebon

5 known vulnerabilities.

Products

Digital Marketing and Agency Templates Addons for Elementor 1 Ultimate Image Hover Effects 1 Business Template Blocks for WPBakery (Visual Composer) Page Builder 1 App Landing Template Blocks for WPBakery (Visual Composer) Page Builder 1 Easy Woocommerce Customizer 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-14119

    App Landing Template Blocks for WPBakery Page Builder <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The App Landing Template Blocks for WPBakery (Visual Composer) Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc_video_play' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitizatio…

    themebon App Landing Template Blocks for WPBakery (Visual Composer) Page Builder Web / CMS
  • Medium 5.3
    CVE-2025-5938

    Digital Marketing and Agency Templates Addons for Elementor <= 1.1.1 - Cross-Site Request Forgery to Import

    The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the import_templates() functi…

    themebon Digital Marketing and Agency Templates Addons for Elementor Web / CMS
  • Medium 6.5
    CVE-2025-22585

    WordPress Ultimate Image Hover Effects plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Ultimate Image Hover Effects ultimate-image-hover-effects allows DOM-Based XSS.This issue affects Ultimate Image Hover Effects: from n/a through <= …

    themebon Ultimate Image Hover Effects