Log in Start free

Thelia

Products

ProductCVEsExploitedLatest
Thelia17–Nov 1, 2026
Thelia Back-office Default Twig Template3–Nov 1, 2026
Thelia Core3–Nov 1, 2026
Thelia Back-office Default Template1–Oct 31, 2026
Thelia Page Module1–Oct 31, 2026
Thelia Smarty Module1–Oct 31, 2026

Exploited and recent CVEs

  • CVE-2026-120249 Medium 6.5 Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes 0.1%
  • CVE-2026-120248 Medium 4.8 Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads 0.2%
  • CVE-2026-120248 Medium 4.8 Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads 0.2%
  • CVE-2026-120248 Medium 4.8 Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads 0.2%
  • CVE-2026-120207 High 7.1 Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes 0.2%
  • CVE-2026-120206 Medium 5.9 Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions 0.1%
  • CVE-2026-120206 Medium 5.9 Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions 0.1%
  • CVE-2026-120206 Medium 5.9 Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions 0.1%
  • CVE-2026-120206 Medium 5.9 Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions 0.1%
  • CVE-2026-120206 Medium 5.9 Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions 0.1%
  • CVE-2026-120205 High 8.0 Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name 0.3%
  • CVE-2026-120205 High 8.0 Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name 0.3%
  • CVE-2026-112285 Medium 4.3 Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders 0.3%
  • CVE-2026-109397 High 7.2 Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Space 0.4%
  • CVE-2026-109396 Medium 4.2 Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula Injection via Exports 0.2%
  • CVE-2026-107248 High 8.8 CVE-2026-107248 0.5%
  • CVE-2026-103537 Medium 5.4 CVE-2026-103537 0.6%
  • CVE-2026-103535 High 8.8 CVE-2026-103535 1.1%
  • CVE-2026-103529 Medium 5.4 CVE-2026-103529 0.3%
  • CVE-2026-103528 Medium 5.4 CVE-2026-103528 0.5%
  • CVE-2026-103527 Medium 6.1 CVE-2026-103527 0.2%
  • CVE-2026-103526 Low 3.7 CVE-2026-103526 0.3%
  • CVE-2026-103524 Medium 4.8 CVE-2026-103524 0.2%
  • CVE-2026-103523 Medium 6.1 CVE-2026-103523 0.3%
  • CVE-2026-103522 High 7.2 CVE-2026-103522 0.6%
  • CVE-2026-103521 High 7.2 CVE-2026-103521 0.6%