Description
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Themify Themify Portfolio Post plugin <= 1.2.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themify | Themify Portfolio Post | ≤ 1.2.4 | — |
Medium · 4.1
CVE-2022-32970
EUVD-2022-36036GHSA-rqg4-rgjf-vh9h
WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Published May 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack