Skip to content
OpenAdvisories

Vendor

themeisle

122 known vulnerabilities.

Products

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 17 Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More 14 Multiple Page Generator Plugin – MPG 11 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE 11 Visualizer: Tables and Charts Manager for WordPress 8 Redirection for Contact Form 7 8 PPOM – Product Addons & Custom Fields for WooCommerce 5 PPOM for WooCommerce 4 Visualizer 4 WP Full Stripe Free 4 Orbit Fox by ThemeIsle 3 Auto Featured Image (Auto Post Thumbnail) 3 Menu Icons by ThemeIsle 3 Visualizer – Tables & Charts Manager with Built-in AI Generator 2 Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts 2 Otter - Gutenberg Block 2 MPG 2 LightStart – Maintenance Mode, Coming Soon and Landing Page Builder 2 Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions 2 Hestia 2 AI Chatbot for WordPress – Hyve Lite 2 Masteriyo LMS PRO 1 Cyr to Lat reloaded – transliteration of links and file names 1 Woody ad snippets 1 Neve PRO 1 Woody Code Snippets 1 Social Slider Feed – Social Media Feed & Gallery Widgets 1 Starter Sites & Templates by Neve 1 Otter Blocks PRO 1 Multiple Pages Generator by Themeisle 1 Cyrlitera 1 Feedzy 1 Social Slider Feed 1 Google Maps Plugin by Intergeo 1 Disable Comments for Any Post Types (Remove comments) 1 Disable Admin Notices individually 1 Robin Image Optimizer – Unlimited Image Optimization & WebP Converter 1 Cloud Templates & Patterns collection 1 Disable Admin Notices – Hide Dashboard Notifications 1 MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO 1
All Critical High Medium Low Exploited only Public exploit

84 results · Clear filters · Feed

  • Medium 6.4
    CVE-2023-4887

    Google Maps Plugin by Intergeo <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Google Maps Plugin by Intergeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This …

    themeisle Google Maps Plugin by Intergeo Web / CMS
  • Medium 6.5
    CVE-2023-23708

    WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.4 versions.

    themeisle Visualizer: Tables and Charts Manager for WordPress Web / CMS
  • Medium 6.5
    CVE-2022-46848

    WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.1 versions.

    themeisle Visualizer: Tables and Charts Manager for WordPress Web / CMS
  • Medium 4.3
    CVE-2022-47143

    WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versions.

    themeisle Multiple Page Generator Plugin – MPG