Skip to content
OpenAdvisories

Product · themifyme

Themify Builder

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-96831

    WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability

    Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

    themifyme Themify Builder
  • High 7.2
    CVE-2026-95864

    Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter

    The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[fonts]' Parameter in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…

    themifyme Themify Builder Web / CMS
  • High 7.1
    CVE-2026-57369

    WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Reflected XSS.This issue affects Themify Builder: from n/a through <= 7.7.4.

    themifyme Themify Builder