Advisories · Technology

Themes4WP Popularis Extra.

Every CVE that names Themes4WP Popularis Extra among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-25422 CVE record

CVSS 5.4 Medium

WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability
- Themes4WP Popularis Extra
- Cross-site request forgery (CSRF)
Not analysed yet 19 Feb 2026
CVE-2024-10795 CVE record

CVSS 4.3 Medium

Popularis Extra <= 1.2.7 - Authenticated (Contributor+) Post Disclosure
- themes4wp Popularis Extra
- Broken access control
Not analysed yet 16 Nov 2024
CVE-2024-9353 CVE record

CVSS 6.1 Medium

Popularis Extra <= 1.2.6 - Reflected Cross-Site Scripting
- themes4wp Popularis Extra
- Cross-site scripting (XSS)
Not analysed yet 4 Oct 2024