themifyme Themify Builder

• CVE-2026-115869 Medium 6.4 Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Field 0.3%
• CVE-2026-111726 Medium 6.4 Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute 0.2%
• CVE-2026-96831 High 8.8 WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability 0.3%
• CVE-2026-95864 High 7.2 Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter 0.3%
• CVE-2026-75027 Medium 5.3 Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action 0.6%
• CVE-2026-15407 Medium 4.3 Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action 0.5%
• CVE-2026-57369 High 7.1 WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-15096 Medium 6.4 Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field 0.3%
• CVE-2026-15097 Medium 6.4 Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field 0.3%
• CVE-2025-9353 Medium 6.4 Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2025-49396 Medium 4.3 WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability 0.2%
• CVE-2024-13319 Medium 6.1 Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting 0.3%
• CVE-2024-56216 Medium 6.5 WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability 0.5%
• CVE-2024-52423 Medium 6.5 WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-9385 Medium 6.1 Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-7836 Medium 4.3 Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication 0.3%