Advisories · Technology

themifyme Themify – WooCommerce Product Filter.

Every CVE that names themifyme Themify – WooCommerce Product Filter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78172 CVE record

CVSS 6.1 Medium

Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting
- themifyme Themify – WooCommerce Product Filter
- Cross-site scripting (XSS)
Not analysed yet 11 Sept 2026
CVE-2024-44046 CVE record

CVSS 5.9 Medium

WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
- themifyme Themify – WooCommerce Product Filter
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2024
CVE-2024-6027 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
- themifyme Themify – WooCommerce Product Filter
- SQL injection
Not analysed yet 21 Jun 2024