# cve.now: Themefusecom

The newest entries naming Themefusecom as an affected vendor (up to 200), of 27 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-14882](https://cve.now/CVE-2026-14882.md): Brizy \<= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta (CVSS 6.4)
- [CVE-2026-2585](https://cve.now/CVE-2026-2585.md): Brizy – Page Builder \<= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter (CVSS 6.4)
- [CVE-2026-5324](https://cve.now/CVE-2026-5324.md): Brizy – Page Builder \<= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value (CVSS 7.2)
- [CVE-2026-32408](https://cve.now/CVE-2026-32408.md): WordPress Brizy plugin \<= 2.7.23 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-0969](https://cve.now/CVE-2025-0969.md): Brizy – Page Builder \<= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get\_users Function (CVSS 6.5)
- [CVE-2025-58594](https://cve.now/CVE-2025-58594.md): WordPress Brizy Plugin \<= 2.7.12 - Broken Access Control Vulnerability (CVSS 4.3)
- [CVE-2025-4370](https://cve.now/CVE-2025-4370.md): Brizy \<= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload (CVSS 5.3)
- [CVE-2025-32198](https://cve.now/CVE-2025-32198.md): WordPress Brizy plugin \<= 2.7.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-10322](https://cve.now/CVE-2024-10322.md): Brizy – Page Builder \<= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4)
- [CVE-2024-10960](https://cve.now/CVE-2024-10960.md): Brizy – Page Builder \<= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads (CVSS 9.9)
- [CVE-2024-51645](https://cve.now/CVE-2024-51645.md): WordPress ThemeFuse Maintenance Mode plugin \<= 1.1.3 - CSRF to Stored XSS vulnerability (CVSS 7.1)
- [CVE-2024-6254](https://cve.now/CVE-2024-6254.md): Brizy – Page Builder \<= 2.5.1 - Cross-Site Request Forgery (CVSS 4.3)
- [CVE-2024-3242](https://cve.now/CVE-2024-3242.md): Brizy – Page Builder \<= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2024-1937](https://cve.now/CVE-2024-1937.md): Brizy – Page Builder \<= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification (CVSS 7.1)
- [CVE-2024-1164](https://cve.now/CVE-2024-1164.md): Brizy – Page Builder \<= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality (CVSS 6.4)
- [CVE-2024-3667](https://cve.now/CVE-2024-3667.md): Brizy – Page Builder \<= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL (CVSS 7.4)
- [CVE-2024-1940](https://cve.now/CVE-2024-1940.md): Brizy – Page Builder \<= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting (CVSS 7.1)
- [CVE-2024-2087](https://cve.now/CVE-2024-2087.md): Brizy – Page Builder \<= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form (CVSS 7.2)
- [CVE-2024-1161](https://cve.now/CVE-2024-1161.md): Brizy – Page Builder \<= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes (CVSS 6.4)
- [CVE-2024-3711](https://cve.now/CVE-2024-3711.md): Brizy – Page Builder \<= 2.4.43 - Missing Authorization (CVSS 4.3)
- [CVE-2024-1291](https://cve.now/CVE-2024-1291.md): Brizy – Page Builder \<= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-1311](https://cve.now/CVE-2024-1311.md): Brizy – Page Builder \<= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2024-1293](https://cve.now/CVE-2024-1293.md): Brizy – Page Builder \<= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-1296](https://cve.now/CVE-2024-1296.md): Brizy – Page Builder \<= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-1165](https://cve.now/CVE-2024-1165.md): Brizy – Page Builder \<= 2.4.39 - Authenticated (Contributor+) Directory Traversal (CVSS 4.3)
- [CVE-2020-36714](https://cve.now/CVE-2020-36714.md): Brizy \< 1.0.126 - Authorization Bypass to Settings Updates (CVSS 7.4)
- [CVE-2023-2897](https://cve.now/CVE-2023-2897.md): Brizy Page Builder \<= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass (CVSS 3.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/themefusecom
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.