Skip to content
OpenAdvisories

Vendor

Themify

16 known vulnerabilities.

Products

Themify Ultra 5 Post Type Builder (PTB) 2 Themify Folo 2 Themify Edmin 2 Themify Event Post 1 Themify Builder 1 Themify Sidepane WordPress Theme 1 Themify Newsy 1 Bloggie 1 Photobox 1 Wigi 1 Rezo 1 Slide 1 Themify Shortcodes 1 Shopo 1 Themify Popup 1 Themify Portfolio Post 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.8
    CVE-2026-56037

    WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3.

    Themify Themify Popup
  • High 7.1
    CVE-2025-31013

    WordPress Themify Folo theme <= 1.9.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Folo allows Reflected XSS. This issue affects Themify Folo: from n/a through 1.9.6.

    Themify Themify Folo
  • High 8.8
    CVE-2025-31047

    WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0.

    Themify Themify Edmin
  • High 8.3
    CVE-2023-46146

    WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability

    Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5.

    Themify Themify Ultra
  • High 8.8
    CVE-2023-46148

    WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability

    Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5.

    Themify Themify Ultra
  • High 8.8
    CVE-2023-46145

    WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in Themify Themify Ultra allows Privilege Escalation.This issue affects Themify Ultra: from n/a through 7.3.5.

    Themify Themify Ultra
  • High 7.1
    CVE-2024-31366

    WordPress Post Type Builder (PTB) plugin <= 2.0.8 - Auth. Arbitrary Post/Page Creation vulnerability

    Missing Authorization vulnerability in Themify Post Type Builder (PTB).This issue affects Post Type Builder (PTB): from n/a through 2.0.8.

    Themify Post Type Builder (PTB)
  • High 7.1
    CVE-2024-31365

    WordPress Post Type Builder (PTB) plugin < 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Post Type Builder (PTB) allows Reflected XSS.This issue affects Post Type Builder (PTB): from n/a before 2.1.1.

    Themify Post Type Builder (PTB)
  • High 7.4
    CVE-2023-46147

    WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5.

    Themify Themify Ultra