Skip to content
OpenAdvisories

Vendor

themeisle

122 known vulnerabilities.

Products

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 17 Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More 14 Multiple Page Generator Plugin – MPG 11 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE 11 Visualizer: Tables and Charts Manager for WordPress 8 Redirection for Contact Form 7 8 PPOM – Product Addons & Custom Fields for WooCommerce 5 PPOM for WooCommerce 4 Visualizer 4 WP Full Stripe Free 4 Orbit Fox by ThemeIsle 3 Auto Featured Image (Auto Post Thumbnail) 3 Menu Icons by ThemeIsle 3 Visualizer – Tables & Charts Manager with Built-in AI Generator 2 Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts 2 Otter - Gutenberg Block 2 MPG 2 LightStart – Maintenance Mode, Coming Soon and Landing Page Builder 2 Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions 2 Hestia 2 AI Chatbot for WordPress – Hyve Lite 2 Masteriyo LMS PRO 1 Cyr to Lat reloaded – transliteration of links and file names 1 Woody ad snippets 1 Neve PRO 1 Woody Code Snippets 1 Social Slider Feed – Social Media Feed & Gallery Widgets 1 Starter Sites & Templates by Neve 1 Otter Blocks PRO 1 Multiple Pages Generator by Themeisle 1 Cyrlitera 1 Feedzy 1 Social Slider Feed 1 Google Maps Plugin by Intergeo 1 Disable Comments for Any Post Types (Remove comments) 1 Disable Admin Notices individually 1 Robin Image Optimizer – Unlimited Image Optimization & WebP Converter 1 Cloud Templates & Patterns collection 1 Disable Admin Notices – Hide Dashboard Notifications 1 MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-102002

    Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget

    The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.6 via the 'otter_form_widget_filter' parameter. This makes it possible …

    themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE Web / CMS
  • Low 2.7
    CVE-2024-51671

    WordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themeisle Otter - Gutenberg Block otter-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Otter - Gutenberg Block: from n/a through <= 3.0.3.

    themeisle Otter - Gutenberg Block
  • Low 2.7
    CVE-2024-10672

    Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion

    The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possib…

    themeisle Multiple Page Generator Plugin – MPG Web / CMS
  • Low 3.1
    CVE-2023-2608

    Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection

    The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to missing nonce verification on the projects_li…

    themeisle Multiple Page Generator Plugin – MPG Web / CMS