Skip to content
OpenAdvisories

Vendor

ThemeGrill

41 known vulnerabilities.

4 results · Clear filters · Feed

  • Critical 9.8

    Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout

    The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validate_checkout_fields() function in versions up to, and including, 1.1.4 The My Account registration path…

  • Critical 9.8

    WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Upload a Web Shell to a Web Server.This issue affects Masteriyo - LMS: from n/a through 2.3.2.

  • Critical 9.8
    CVE-2026-54807 Public exploit

    WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.

  • Critical 9.9

    ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset

    The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the Wo…