Themelooks

14 CVEs across 7 Themelooks products. Browse Themelooks vulnerabilities, severities, and proof-of-concept exploits.

Themelooks products with known CVEs

ProductCVEs
Enter Addons8
Enter Addons5
Enter Addons – Ultimate Template Builder For Elementor5
Mfolio Lite2
Foodbook1
Foodbook Lite – Online Food Ordering System1
Mfolio1
Themelooks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-11802Medium5.32026-07-14The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. The re…
CVE-2026-25014Medium4.32026-02-03Cross-Site Request Forgery (CSRF) vulnerability in themelooks Enter Addons enteraddons allows Cross Site Request Forgery.This issue affects Enter Addons: from…
CVE-2025-8687Medium6.42025-12-13The Enter Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown and Image Comparison widgets in all versions up t…
CVE-2025-60125Medium5.32025-09-26Insertion of Sensitive Information Into Sent Data vulnerability in themelooks FoodBook foodbook allows Retrieve Embedded Sensitive Data.This issue affects Food…
CVE-2025-31847Medium6.52025-04-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelooks mFolio Lite mfolio-lite allows DOM-Based XSS.T…
CVE-2024-56252Medium6.52025-01-02Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelooks Enter Addons enteraddons allows Stored XSS.Thi…
CVE-2024-10868Medium4.32024-11-23The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.1…
CVE-2024-9307Critical9.92024-11-06The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it…
CVE-2024-47625Medium6.52024-10-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelooks Enter Addons enteraddons allows Stored XSS.Thi…
CVE-2024-7611Medium6.42024-09-06The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute of the Eve…
CVE-2024-43225Medium6.52024-08-12Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeLooks Enter Addons allows Stored XSS.This iss…
CVE-2024-37263Medium6.52024-07-22Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeLooks Enter Addons enteraddons allows Stored…
CVE-2024-3831Medium6.42024-05-14The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all vers…
CVE-2024-3680Medium6.42024-05-14The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Animation Title widget's i…