Log in Start free

Themepoints

Products

ProductCVEsExploitedLatest
Accordion3–Aug 13, 2026
Logo Showcase3–Oct 5, 2026
Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress2–Feb 18, 2025
Carousel Ultimate2–Sep 22, 2025
Tab Ultimate2–Oct 22, 2025
Testimonials2–Sep 25, 2024
Accordions – Responsive Accordion & FAQ Plugin for WordPress1–Oct 30, 2023
Testimonials (WordPress plugin)1–Oct 28, 2022
Team Showcase1–Jan 6, 2026
Team Showcase – Responsive Team Members Grid, Slider & Carousel Plugin1–Oct 19, 2023
Service Box1–Jan 7, 2025
Skill Bar1–Jan 9, 2025

Exploited and recent CVEs

  • CVE-2026-105060 Medium 6.5 WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-66471 Medium 6.5 WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69350 Medium 5.9 WordPress Accordion plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69335 Medium 6.5 WordPress Team Showcase plugin <= 2.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62060 Medium 6.5 WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-58652 Medium 6.5 WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-58684 Medium 6.5 WordPress Logo Showcase plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-58820 Medium 5.9 WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-47497 Medium 6.5 WordPress Logo Showcase plugin <= 3.0.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2024-13704 High 7.2 Super Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2025-22805 Medium 6.5 WordPress Skill Bar Plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-12699 Medium 6.4 Service Box <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-43959 High 7.1 WordPress Super Testimonials plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-31348 Medium 6.5 WordPress Super Testimonials plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-47809 Medium 5.9 WordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-5667 Medium 6.4 Tab Ultimate <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%
  • CVE-2023-5666 Medium 6.4 Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%
  • CVE-2023-5613 Medium 6.4 Super Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%
  • CVE-2023-5639 Medium 6.4 Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%
  • CVE-2021-36858 Medium 4.8 WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability 0.5%