Vendor

    ThemeGrill

    42 known vulnerabilities in products by ThemeGrill, 0 of them actively exploited (CISA KEV).

    Key figures

    42

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ThemeGrill
    CriticalCVE-2020-36333

    ThemeGrill Demo Importer: security vulnerability

    		9.1
    CriticalCVE-2024-24882

    WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

    also in 1 other product

    		9.8
    MediumCVE-2023-3345

    LMS by Masteriyo < 1.6.8 - Information Exposure

    		6.5
    MediumCVE-2024-0679

    ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation

    		6.5
    CriticalCVE-2020-36837

    ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset

    		9.9
    CriticalCVE-2026-54807

    WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability

    		9.8
    HighCVE-2026-108485

    WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-109692

    WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

    		7.1
    MediumCVE-2024-33939

    WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

    also in 1 other product

    		5.3
    HighCVE-2020-36334

    ThemeGrill Demo Importer: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2026-49111

    WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability

    		8.8
    HighCVE-2026-25425

    WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-49081

    WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerability

    		8.2
    MediumCVE-2026-105881

    WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-105882

    WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2026-40726

    WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerability

    		8.2
    HighCVE-2026-66606

    WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-25467

    WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability

    		5.3
    HighCVE-2026-39524

    WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability

    		7.5
    MediumCVE-2026-96334

    WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

    		5.6
    MediumCVE-2026-25450

    WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-78290

    WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-109699

    WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2026-106597

    WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-106598

    WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

    		5.3

    All vulnerabilities in search

    Products

    Products by ThemeGrill
    User Registration120
    Maintenance Page40
    Themegrill Demo Importer40
    ColorMag30
    Masteriyo - Lms30
    Masteriyo - LMS30