Advisories · Technology

Menu Icons by ThemeIsle.

Every CVE that names Menu Icons by ThemeIsle among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-1755 CVE record

CVSS 6.4 Medium

Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting
- Menu Icons by ThemeIsle
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2026
CVE-2024-4635 CVE record

CVSS 6.4 Medium

Menu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
- Menu Icons by ThemeIsle
- Cross-site scripting (XSS)
Not analysed yet 16 May 2024
CVE-2024-1047 CVE record

CVSS 5.3 Medium

ThemeIsle SDK <= Various Versions - Missing Authorization
- Menu Icons by ThemeIsle
- themeisle Starter Sites & Templates by Neve
- Broken access control
Not analysed yet 2 Feb 2024