Vendor

    Themeisle

    137 known vulnerabilities in products by Themeisle, 0 of them actively exploited (CISA KEV).

    Key figures

    137

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    10

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Themeisle
    CriticalCVE-2019-16932

    Themeisle Visualizer: Server-Side Request Forgery (SSRF)

    		10.0
    HighCVE-2023-2288

    Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization

    		8.8
    CriticalCVE-2024-3105

    Code Injection (CVE-2024-3105)

    		9.9
    HighCVE-2022-2444

    Themeisle Visualizer: Deserialization of Untrusted Data

    		8.8
    CriticalCVE-2026-104801

    Themeisle PPOM: Path Traversal

    		9.1
    CriticalCVE-2024-3962

    Themeisle PPOM: Unrestricted Upload of File with Dangerous Type

    		9.8
    MediumCVE-2019-16931

    Themeisle Visualizer: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2025-11391

    Themeisle PPOM: Unrestricted Upload of File with Dangerous Type

    		9.8
    CriticalCVE-2017-20251

    WordPress Insert PHP Plugin < 2.5.1 PHP Code Injection via REST API

    		9.8
    HighCVE-2025-8141

    Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion

    		8.8
    HighCVE-2026-13468

    Missing Authorization (CVE-2026-13468)

    		7.5
    HighCVE-2025-8145

    Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection

    		8.8
    HighCVE-2024-1317

    RSS Aggregator by Feedzy <= 4.4.2 - Authenticated (Contributor+) SQL Injection

    		8.8
    MediumCVE-2026-85198

    MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path

    		6.5
    HighCVE-2026-109207

    Cross-site Scripting (CVE-2026-109207)

    		7.2
    HighCVE-2026-65526

    WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2025-53209

    WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability

    		9.8
    HighCVE-2023-39920

    WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerability

    		7.5
    CriticalCVE-2026-25366

    WordPress Woody ad snippets plugin <= 2.7.1 - Remote Code Execution (RCE) vulnerability

    		9.9
    CriticalCVE-2024-27951

    Themeisle Multiple Page Generator Plugin: Unrestricted Upload of File with Dangerous Type

    		9.1
    HighCVE-2024-3750

    Themeisle Visualizer: Missing Authorization

    		8.8
    MediumCVE-2026-120659

    Themeisle Redirection for Contact Form 7: Missing Authorization

    		5.3
    HighCVE-2026-62073

    WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability

    		7.5
    HighCVE-2023-2607

    Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection

    		7.2
    HighCVE-2023-47529

    ThemeIsle Cloud Templates & Patterns collection: Exposure of Sensitive Information to an Unauthorized Actor

    		5.3

    All vulnerabilities in search

    Products

    Products by Themeisle
    Rss Aggregator By Feedzy – Feed To Post, Autoblogging, News & Youtube Video Feeds Aggregator170
    Orbit Fox150
    Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More140
    Multiple Page Generator Plugin – Mpg110
    Otter Blocks – Gutenberg Blocks, Page Builder For Gutenberg Editor & Fse110
    Otter Blocks100
    Themeisle Multiple Page Generator Plugin100
    Redirection For Contact Form 790
    RSS Aggregator by Feedzy90
    Themeisle Visualizer90
    Visualizer: Tables And Charts Manager For Wordpress80
    Ppom – Product Addons & Custom Fields For Woocommerce50
    Ppom For Woocommerce40
    Product Addons \& Fields For Woocommerce40
    Wp Full Stripe Free40
    Auto Featured Image (auto Post Thumbnail)30
    Menu Icons By Themeisle30
    Orbit Fox By Themeisle30