Themes4wp
6 CVEs across 6 Themes4wp products. Browse Themes4wp vulnerabilities, severities, and proof-of-concept exploits.
Themes4wp products with known CVEs
Themes4wp CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-25422 | Medium | 5.4 | 2026-02-19 | Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Ext… |
CVE-2025-26867 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through… |
CVE-2024-38763 | Medium | 4.3 | 2025-01-02 | Cross-Site Request Forgery (CSRF) vulnerability in themes4wp Popularis Verse popularis-verse allows Cross Site Request Forgery.This issue affects Popularis Ver… |
CVE-2024-10795 | Medium | 4.3 | 2024-11-16 | The Popularis Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.7 via the 'elementor-template' shortco… |
CVE-2024-50470 | Medium | 6.5 | 2024-10-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themes4WP Themes4WP YouTube External Subtitles themes4wp-… |
CVE-2024-9353 | Medium | 6.1 | 2024-10-04 | The Popularis Extra plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate… |