Log in Start free

Themify

Products

ProductCVEsExploitedLatest
Themify Ultra5–Jun 19, 2024
Themify Edmin2–Jan 6, 2026
Post Type Builder (PTB)2–Apr 9, 2024
Themify Folo2–Jun 17, 2026
Slide1–Jan 6, 2026
Themify Builder1–Feb 21, 2024
Themify Event Post1–Mar 29, 2024
Themify Newsy1–Jan 6, 2026
Themify Popup1–Jul 2, 2026
Themify Portfolio Post1–May 10, 2023
Themify Shortcodes1–Aug 12, 2024
Themify Sidepane WordPress Theme1–Jan 6, 2026
Bloggie1–Jan 6, 2026
Wigi1–Jan 6, 2026
Photobox1–Jan 6, 2026
Rezo1–Jan 6, 2026
Shopo1–Jan 5, 2026

Exploited and recent CVEs

  • CVE-2026-56037 High 8.8 WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-31013 High 7.1 WordPress Themify Folo theme <= 1.9.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-30996 Critical 9.9 Arbitrary File Upload Vulnerability in WordPress themes by Themify 0.5%
  • CVE-2025-31048 Critical 9.9 WordPress Shopo <= 1.1.4 - Arbitrary File Upload Vulnerability 0.3%
  • CVE-2025-31047 High 8.8 WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability 0.4%
  • CVE-2024-43133 Medium 6.5 WordPress Themify Shortcodes plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-46146 High 8.3 WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability 0.5%
  • CVE-2023-46148 High 8.8 WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability 0.6%
  • CVE-2023-46145 High 8.8 WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerability 0.7%
  • CVE-2024-31366 High 7.1 WordPress Post Type Builder (PTB) plugin <= 2.0.8 - Auth. Arbitrary Post/Page Creation vulnerability 0.5%
  • CVE-2024-31365 High 7.1 WordPress Post Type Builder (PTB) plugin < 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-30440 Medium 5.9 WordPress Themify Event Post plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-24872 Medium 4.3 WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-46149 Critical 9.9 WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload 0.7%
  • CVE-2023-46147 High 7.4 WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injection 0.6%
  • CVE-2022-32970 Medium 4.1 WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS) 0.4%