Log in Start free

ThemeLooks

Products

ProductCVEsExploitedLatest
Enter Addons5–Feb 3, 2026
Enter Addons – Ultimate Template Builder for Elementor5–Dec 13, 2025
mFolio Lite2–Apr 1, 2025
FoodBook1–Sep 26, 2025
FoodBook Lite – Online Food Ordering System1–Jul 14, 2026

Exploited and recent CVEs

  • CVE-2026-11802 Medium 5.3 FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action 0.5%
  • CVE-2026-25014 Medium 4.3 WordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-8687 Medium 6.4 Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets 0.2%
  • CVE-2025-60125 Medium 5.3 WordPress FoodBook Plugin <= 4.7.6 - Sensitive Data Exposure Vulnerability 0.3%
  • CVE-2025-31847 Medium 6.5 WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-56252 Medium 6.5 WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-10868 Medium 4.3 Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure 0.4%
  • CVE-2024-9307 Critical 9.9 mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files 1.0%
  • CVE-2024-47625 Medium 6.5 WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-7611 Medium 6.4 Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget 0.3%
  • CVE-2024-43225 Medium 6.5 WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37263 Medium 6.5 WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-3831 Medium 6.4 Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget 0.4%
  • CVE-2024-3680 Medium 6.4 Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag 0.4%