Advisories · Technology

themeisle Visualizer: Tables and Charts Manager for WordPress.

Every CVE that names themeisle Visualizer: Tables and Charts Manager for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8689 CVE record

CVSS 4.3 Medium

Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData()…
- themeisle Visualizer: Tables and Charts Manager for WordPress
- Broken access control
Not analysed yet 28 May 2026
CVE-2025-12483 CVE record

CVSS 6.5 Medium

Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection
- themeisle Visualizer: Tables and Charts Manager for WordPress
- SQL injection
Not analysed yet 2 Dec 2025
CVE-2025-1065 CVE record

CVSS 6.4 Medium

Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File
- themeisle Visualizer: Tables and Charts Manager for WordPress
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2025
CVE-2024-3750 CVE record

CVSS 8.8 High

Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Execution
- themeisle Visualizer: Tables and Charts Manager for WordPress
- Broken access control
Not analysed yet 16 May 2024
CVE-2024-1047 CVE record

CVSS 5.3 Medium

ThemeIsle SDK <= Various Versions - Missing Authorization
- Menu Icons by ThemeIsle
- themeisle Starter Sites & Templates by Neve
- Broken access control
Not analysed yet 2 Feb 2024
CVE-2023-23708 CVE record

CVSS 6.5 Medium

WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)
- Themeisle Visualizer: Tables and Charts Manager for WordPress
- Cross-site scripting (XSS)
Not analysed yet 3 May 2023
CVE-2022-46848 CVE record

CVSS 6.5 Medium

WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)
- Themeisle Visualizer: Tables and Charts Manager for WordPress
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2023
CVE-2022-2444 CVE record

CVSS 8.8 High

Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
- themeisle Visualizer: Tables and Charts Manager for WordPress
- Insecure deserialization
Not analysed yet 18 Jul 2022