Advisories · Technology
themifyme Themify Builder.
Every CVE that names themifyme Themify Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Field
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 8.8 High
WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability
- themifyme Themify Builder
- Insecure deserialization
- CVSS 7.2 High
Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action
- themifyme Themify Builder
- Broken access control
- CVSS 4.3 Medium
Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action
- themifyme Themify Builder
- Broken access control
- CVSS 7.1 High
WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability
- themifyme Themify Builder
- Broken access control
- CVSS 6.1 Medium
Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability
- themifyme Themify Builder
- File inclusion
- CVSS 6.5 Medium
WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting
- themifyme Themify Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication
- themifyme Themify Builder
- Broken access control