Security
فارسی
All products

themify-builder

WordPress · Plugin
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater FieldCVE-2026-115869 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode AttributeCVE-2026-111726 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.8.1 - Authenticated (Contributor+) PHP Object InjectionCVE-2026-96831 themify-builder WordPress High Fix reported
Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' ParameterCVE-2026-95864 themify-builder WordPress High Fix reported
Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX ActionCVE-2026-75027 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX ActionCVE-2026-15407 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.7.4 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-57369 themify-builder WordPress High Fix reported
Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' FieldCVE-2026-15096 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module FieldCVE-2026-15097 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-9353 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.6.7 - Missing AuthorizationCVE-2025-49396 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.6.5 - Reflected Cross-Site ScriptingCVE-2024-13319 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.6.3 - Authenticated (Contributor+) Local File InclusionCVE-2024-56216 themify-builder WordPress High Fix reported
Themify Builder <= 7.6.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-52423 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.6.2 - Reflected Cross-Site ScriptingCVE-2024-9385 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post DuplicationCVE-2024-7836 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.5.7 - Open Redirect via 'tb_redirect_fail'CVE-2024-3032 themify-builder WordPress Medium Fix reported
Themify Builder <= 7.0.5 - Cross-Site Request ForgeryCVE-2024-24872 themify-builder WordPress Medium Fix reported
Themify Builder <= 5.3.1 - Reflected Cross-Site Scripting themify-builder WordPress Medium Fix reported