Themefusecom vulnerabilities
27 CVEs and advisories name Themefusecom as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-14882Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta
- CVE-2026-2585Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter
- CVE-2026-5324Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value
- CVE-2026-32408WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability
- CVE-2025-0969Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function
- CVE-2025-58594WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability
- CVE-2025-4370Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload
- CVE-2025-32198WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-10322Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-10960Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
- CVE-2024-51645WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability
- CVE-2024-6254Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery
- CVE-2024-3242Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
- CVE-2024-1937Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
- CVE-2024-1164Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality
- CVE-2024-3667Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
- CVE-2024-1940Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting
- CVE-2024-2087Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form
- CVE-2024-1161Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
- CVE-2024-3711Brizy – Page Builder <= 2.4.43 - Missing Authorization
- CVE-2024-1291Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-1311Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
- CVE-2024-1293Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-1296Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-1165Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
- CVE-2020-36714Brizy < 1.0.126 - Authorization Bypass to Settings Updates
- CVE-2023-2897Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass