Skip to content
OpenAdvisories

Vendor

ThemeHunk

39 known vulnerabilities.

Products

Lead Form Builder & Contact Form 4 Vayu Blocks – Website Builder for the Block Editor 3 Contact Form & Lead Form Elementor Builder 3 Gutenberg Blocks 2 Advance WordPress Search Plugin 2 Advance Product Search 2 Easy Mega Menu for WordPress – ThemeHunk 2 Big Store 2 Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 2 Th Shop Mania 2 Hunk Companion 1 Wishlist for WooCommerce 1 Zita 1 Variation Swatches for WooCommerce 1 Oneline Lite 1 WP Popup Builder 1 Top Store 1 ThemeHunk 1 TH Login Registration 1 Advance Product Search- Voice & Ajax Search for WooCommerce 1 TH Variation Swatches 1 ThemeHunk Customizer 1 Zita Site Builder 1 Open Shop 1 WP Popup Builder – Popup Forms and Marketing Lead Generation 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-2568 Public exploit

    Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.0.4 - 1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update

    The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the 'vayu_blocks_get_toggle_switch_values_callback' and 'vayu_blocks_save_tog…

    ThemeHunk Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce Web / CMS
  • Critical 9.1
    CVE-2024-54369 Public exploit

    WordPress Zita Site Builder plugin <= 1.0.2 - Arbitrary Plugin Installation and Activation vulnerability

    Missing Authorization vulnerability in ThemeHunk Zita Site Builder ai-site-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Zita Site Builder: from n/a through <= 1.0.2.

    ThemeHunk Zita Site Builder
  • Critical 9.8
    CVE-2024-10124 Public exploit EPSS 33%

    Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

    The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation due to a missing capability check on the tp_install() function in all versions up to, and including,…

    ThemeHunk Vayu Blocks – Website Builder for the Block Editor Web / CMS
  • High 8.8
    CVE-2024-10674 Public exploit

    Th Shop Mania <= 1.4.9 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

    The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_install_and_activate_callback() function in all versions up to, and including, 1.4.9. This makes it possib…

    ThemeHunk Th Shop Mania Web / CMS
  • High 8.8
    CVE-2024-10673 Public exploit

    Top Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

    The Top Store theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the top_store_install_and_activate_callback() function in all versions up to, and including, 1.5.4. This makes it possible for a…

    ThemeHunk Top Store Web / CMS
  • High 7.3
    CVE-2024-9061 Public exploit EPSS 54%

    WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add

    The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add AJAX action in all versions up to, and including, 1.3.5. This is due to the softw…

    ThemeHunk WP Popup Builder – Popup Forms and Marketing Lead Generation Web / CMS
  • Critical 9.8
    CVE-2024-9707 Public exploit

    Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

    The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4. This makes it possible…

    ThemeHunk Hunk Companion Web / CMS