en
Themeisle is a WordPress themes and plugins provider. It builds web software that helps customers create and run WordPress websites, including site owners and development agencies building sites for clients. The organization operates as a global remote team and also provides product documentation, support, and WordPress-focused educational resources.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/24/2026, themeisle recorded 12 security vulnerabilities in the last 90 days across 9 products, including 4 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE had the most security vulnerabilities in the themeisle ecosystem, with 2 vulnerabilities—approximately 16.67% of the provider's total vulnerabilities during this period.
CVE-2026-109207RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URLCVE-2026-104801PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' ParameterCVE-2026-104735RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>CVE-2026-97305WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-102002Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget132 Results | Page 1 of 14
| SeverityCritical |
| SeverityMedium |
| SeverityMedium |
| SeverityLow |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |