T
Vendor security profile
Themeisle
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
1
2
5
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High3 (33%)
Medium4 (44%)
Low1 (11%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
9.1
CVE-2026-104801
PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter
T
Patch status unknownEPSS %1
6.4
CVE-2026-104735
RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>
T
Patch status unknownEPSS %0
6.9
CVE-2026-97305
WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability
T
Patch status unknownEPSS %0
3.1
CVE-2026-102002
Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget
T
Patch status unknownEPSS %0
7.5
CVE-2026-62073
WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
T
Patch status unknownEPSS %0
5.3
CVE-2026-97302
WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
T
Patch status unknownEPSS %0
6.5
CVE-2026-85198
MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path
T
Patch status unknownEPSS %0
7.1
CVE-2026-61960
WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability
T
Patch status unknownEPSS %0
8.5
CVE-2026-65526
WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
T
Patch status unknownEPSS %0