Advisories · Technology

Themify Folo.

Every CVE that names Themify Folo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-31013 CVE record

CVSS 7.1 High

WordPress Themify Folo theme <= 1.9.6 - Reflected Cross Site Scripting (XSS) vulnerability
- Themify Folo
- Cross-site scripting (XSS)
Not analysed yet 17 Jun 2026
CVE-2025-30996 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Arbitrary File Upload Vulnerability in WordPress themes by Themify
- Themify Sidepane WordPress Theme
- Themify Newsy
- Unrestricted file upload
Not analysed yet 6 Jan 2026