Skip to content
OpenAdvisories

Vendor

ThemeGrill

41 known vulnerabilities.

Products

User Registration 15 Masteriyo - LMS 4 ColorMag 3 Himalayas 2 ThemeGrill Demo Importer 2 User Registration Stripe 2 Zakra 2 Registration Form for WooCommerce 2 Maintenance Page 2 Magazine Blocks 1 Spacious 1 Esteem 1 Accelerate 1 SmartSMTP 1 ColorNews 1 eStore 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2026-108485

    WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13.

    ThemeGrill eStore
  • High 7.1
    CVE-2026-109692

    WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.

    ThemeGrill User Registration
  • High 7.1
    CVE-2026-66606

    WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in SmartSMTP <= 1.2.0 versions.

    ThemeGrill SmartSMTP
  • High 8.2
    CVE-2026-49081

    WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.

    ThemeGrill User Registration Stripe
  • High 8.2
    CVE-2026-40726

    WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.

    ThemeGrill User Registration Stripe
  • High 7.5
    CVE-2026-39524

    WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability

    Unauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions.

    ThemeGrill Masteriyo - LMS
  • High 7.5
    CVE-2026-25425

    WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in User Registration <= 5.1.2 versions.

    ThemeGrill User Registration
  • High 8.8
    CVE-2026-49111

    WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0.

    ThemeGrill Masteriyo - LMS