Themefic

    Dashboard / Vendors

    Products: 9
    Vulnerabilities: 51
    Known Exploited: 0
    4
    Critical Level Threats
    21
    High Level Threats
    26
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Items Per Page

    Vulnerabilities

    CVE-2026-97470

    Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role

    Last Modified: Oct 21, 2026
    Published: Oct 16, 2026

    CVE-2026-103480

    Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute

    Last Modified: Oct 23, 2026
    Published: Oct 16, 2026

    CVE-2026-82901

    Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

    Last Modified: Sep 27, 2026
    Published: Sep 26, 2026

    CVE-2026-95586

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.50 - Cross Site Scripting (XSS) vulnerability

    Last Modified: Sep 23, 2026
    Published: Sep 23, 2026

    CVE-2026-15948

    Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameter

    Last Modified: Aug 17, 2026
    Published: Aug 15, 2026
    Items Per Page
    Themefic Vulnerabilities & Security CVEs | CVE-DB