Mythemeshop
12 CVEs across 15 Mythemeshop products. Browse Mythemeshop vulnerabilities, severities, and proof-of-concept exploits.
Mythemeshop products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-9635 | Medium | 6.4 | 2026-07-23 | The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the [tab] shortcode in versions… |
CVE-2026-24522 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-8425 | High | 8.8 | 2025-09-11 | The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability c… |
CVE-2025-8423 | Medium | 5.4 | 2025-09-11 | The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mtswpt_remove_plugin() and… |
CVE-2025-2158 | High | 8.8 | 2025-05-10 | The WordPress Review Plugin: The Ultimate Solution for Building a Review Website plugin for WordPress is vulnerable to Local File Inclusion in all versions up… |
CVE-2025-46482 | Medium | 6.5 | 2025-04-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz wp-quiz allows Stored XSS.This issue… |
CVE-2024-37452 | Medium | 4.3 | 2025-01-02 | Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop Schema Lite allows Cross Site Request Forgery.This issue affects Schema Lite: from n/a through 1… |
CVE-2024-37938 | Medium | 4.3 | 2024-07-12 | Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop SociallyViral.This issue affects SociallyViral: from n/a through 1.0.10. |
CVE-2024-5802 | Medium | 4.8 | 2024-07-09 | The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2023-23896 | Medium | 5.4 | 2024-01-17 | Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17. |
CVE-2023-28495 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop WP Shortcode by MyThemeShop plugin <= 1.4.16 versions. |
CVE-2023-30472 | High | 7.1 | 2023-09-27 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin <= 1.0.17 versions. |
CVE-2021-36829 | Medium | 4.8 | 2022-09-06 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 at WordPress. |
CVE-2021-36844 | Low | 3.4 | 2022-05-02 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress. |
CVE-2017-18569 | High | 8.8 | 2019-08-20 | The my-wp-translate plugin before 1.0.4 for WordPress has CSRF. |
CVE-2017-18568 | Medium | 6.1 | 2019-08-20 | The my-wp-translate plugin before 1.0.4 for WordPress has XSS. |
CVE-2019-7411 | Medium | 5.4 | 2019-05-13 | Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web scri… |