Themegrill vulnerabilities
41 CVEs and advisories name Themegrill as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-119522WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability
- CVE-2026-124258WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability
- CVE-2026-119075Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout
- CVE-2026-120840WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability
- CVE-2026-25450WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability
- CVE-2026-25467WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability
- CVE-2026-108485WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-105882WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-109692WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
- CVE-2026-109699WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
- CVE-2026-106598WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability
- CVE-2026-105881WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-103076WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-106597WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
- CVE-2026-96334WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
- CVE-2026-78290WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-66606WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-73996WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability
- CVE-2025-9266Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
- CVE-2026-4804Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API
- CVE-2026-52701WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability
- CVE-2026-54807WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability
- CVE-2026-49081WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerability
- CVE-2026-40726WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerability
- CVE-2026-42743WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability
- CVE-2026-39524WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability
- CVE-2026-25425WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability
- CVE-2026-49111WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability
- CVE-2026-40730WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerability
- CVE-2025-9331Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import