Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

themifyme Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity
`CVE-2026-78172`Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productThemify – WooCommerce Product Filter	Published09/11/2026	SeverityMedium
`CVE-2026-75027`Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published08/22/2026	SeverityMedium
`CVE-2026-15407`Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published07/16/2026	SeverityMedium
`CVE-2026-57369`WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published07/13/2026	SeverityHigh
`CVE-2026-15096`Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published07/11/2026	SeverityMedium
`CVE-2026-15097`Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published07/11/2026	SeverityMedium
`CVE-2026-1032`Conditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options Update	Exploitation statusNot known exploited	FixYes	Affected productConditional Menus	Published03/26/2026	SeverityMedium
`CVE-2026-32449`WordPress Themify Event Post plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Event Post	Published03/13/2026	SeverityMedium
`CVE-2025-67533`WordPress Themify Portfolio Post plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Portfolio Post	Published12/09/2025	SeverityHigh
`CVE-2025-9353`Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published09/24/2025	SeverityMedium
`CVE-2025-58787`WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Popup	Published09/05/2025	SeverityMedium
`CVE-2025-49392`WordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Audio Dock	Published08/20/2025	SeverityMedium
`CVE-2025-49395`WordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Icons	Published08/20/2025	SeverityMedium
`CVE-2025-49396`WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published08/20/2025	SeverityMedium
`CVE-2025-39581`WordPress Themify Shortcodes plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Shortcodes	Published04/16/2025	SeverityMedium
`CVE-2025-30832`WordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Event Post	Published03/27/2025	SeverityMedium
`CVE-2025-30831`WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Event Post	Published03/27/2025	SeverityHigh
`CVE-2024-13319`Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published01/22/2025	SeverityMedium
`CVE-2024-56239`WordPress Themify Audio Dock plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Audio Dock	Published01/02/2025	SeverityMedium
`CVE-2024-56216`WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published12/31/2024	SeverityMedium
`CVE-2024-12414`Themify Store Locator <= 1.1.9 - Cross-Site Request Forgery	Exploitation statusNot known exploited	FixYes	Affected productThemify Store Locator	Published12/13/2024	SeverityMedium
`CVE-2024-52423`WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published11/18/2024	SeverityMedium
`CVE-2024-44046`WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productThemify – WooCommerce Product Filter	Published10/06/2024	SeverityMedium
`CVE-2024-9385`Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published10/05/2024	SeverityMedium
`CVE-2024-7836`Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication	Exploitation statusNot known exploited	FixYes	Affected productThemify Builder	Published08/22/2024	SeverityMedium
`CVE-2024-6027`Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter	Exploitation statusNot known exploited	FixYes	Affected productThemify – WooCommerce Product Filter	Published06/21/2024	SeverityCritical
`CVE-2024-4567`Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode	Exploitation statusNot known exploited	FixYes	Affected productThemify Shortcodes	Published05/09/2024	SeverityMedium
`CVE-2024-2732`Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productThemify Shortcodes	Published03/26/2024	SeverityMedium