Advisories · Technology

themifyme Themify Popup.

Every CVE that names themifyme Themify Popup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109989 CVE record

CVSS 6.4 Medium

Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter
- themifyme Themify Popup
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2026
CVE-2025-58787 CVE record

CVSS 6.5 Medium

WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability
- themifyme Themify Popup
- Cross-site scripting (XSS)
Not analysed yet 5 Sept 2025