Skip to content
OpenAdvisories

Product · themeisle

Visualizer: Tables and Charts Manager for WordPress

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-8689

    Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() Functions

    The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14. This is due to a missing capability check on the renderChartPages() and uploadData() functions, …

    themeisle Visualizer: Tables and Charts Manager for WordPress Web / CMS
  • Medium 6.5
    CVE-2025-12483

    Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection

    The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of suffici…

    themeisle Visualizer: Tables and Charts Manager for WordPress Web / CMS
  • Medium 6.4
    CVE-2025-1065

    Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File

    The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and including, 3.11.8 due to insufficient input sanitization and ou…

    themeisle Visualizer: Tables and Charts Manager for WordPress Web / CMS
  • Medium 5.3
    CVE-2024-1047

    ThemeIsle SDK <= Various Versions - Missing Authorization

    Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated atta…

    themeisle Optimole rsocial RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Web / CMS
  • Medium 6.5
    CVE-2023-23708

    WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.4 versions.

    themeisle Visualizer: Tables and Charts Manager for WordPress Web / CMS
  • Medium 6.5
    CVE-2022-46848

    WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.1 versions.

    themeisle Visualizer: Tables and Charts Manager for WordPress Web / CMS