Themegrill vulnerabilities
41 CVEs and advisories name Themegrill as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-9202ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
- CVE-2025-8595Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
- CVE-2020-36837ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset
- CVE-2024-39629WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37432WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-34571WordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-33540WordPress ColorNews theme <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-2500ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
- CVE-2024-1462Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API
- CVE-2024-1370Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure
- CVE-2024-0679ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation