How many themify ultra CVEs are in CISA KEV?

None of themify ultra's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for themify ultra vulnerabilities?

Yes — 1 of themify ultra's CVEs have a known public exploit.

Which versions of themify ultra are affected?

5 distinct themify ultra versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in themify ultra CVEs?

themify ultra's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-269 (Improper Privilege Management), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-502 (Deserialization of Untrusted Data).

How many critical themify ultra vulnerabilities are there?

themify ultra has 1 critical and 4 high-severity CVEs.

What is the average severity of themify ultra CVEs?

The average CVSS base score across themify ultra's scored CVEs is 9.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

themify

5 CVEs

themify ultra Vulnerabilities

Name: themify ultra vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ultra by themify.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

9.0

Avg CVSS

2023–2024

Last updated June 19, 2024

Overview

themify ultra has 5 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 9.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting themify ultra, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of themify ultra's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High4

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of themify ultra's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of themify ultra's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every themify ultra version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 7.3.63 CVEs
< 7.3.51 CVE
<= 7.3.51 CVE

Fixed in

7.3.63 CVEs
7.3.51 CVE

Find a version

5 CVEs

Sort

WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability
CVE-2023-46146
Patch
CWE-862
High · CVSS 8.8
EPSS 0.4% (29th pct)2024-06-19
WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability
CVE-2023-46148
Public exploit
Patch
CWE-862
High · CVSS 8.8
EPSS 0.4% (36th pct)2024-06-19
WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerability
CVE-2023-46145
Patch
CWE-269
High · CVSS 8.8
EPSS 0.6% (44th pct)2024-05-17
WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload
CVE-2023-46149
Patch
CWE-434
Critical · CVSS 9.9
EPSS 0.6% (44th pct)2023-12-20
WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injection
CVE-2023-46147
Patch
CWE-502
High · CVSS 8.8
EPSS 0.5% (40th pct)2023-12-20

Common weakness types

The CWE weakness categories most often found in themify ultra CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many themify ultra CVEs were published each year.

2023

2

2024

3

Other themify products

Browse vulnerabilities for other products by themify.

builder6 CVEs woocommerce product filter6 CVEs portfolio post5 CVEs Themify Ultra5 CVEs themify shortcodes3 CVEs Post Type Builder (PTB)2 CVEs Themify Builder2 CVEs Themify Edmin2 CVEs

All themify vulnerabilities

Frequently asked questions

Common questions about themify ultra vulnerabilities.

How many CVEs does themify ultra have?: themify ultra has 5 published CVE records since 2023.
How many themify ultra CVEs are in CISA KEV?: None of themify ultra's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for themify ultra vulnerabilities?: Yes — 1 of themify ultra's CVEs have a known public exploit.
Which versions of themify ultra are affected?: 5 distinct themify ultra versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in themify ultra CVEs?: themify ultra's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-269 (Improper Privilege Management), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-502 (Deserialization of Untrusted Data).
How many critical themify ultra vulnerabilities are there?: themify ultra has 1 critical and 4 high-severity CVEs.
What is the average severity of themify ultra CVEs?: The average CVSS base score across themify ultra's scored CVEs is 9.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track themify ultra vulnerabilities

Monitor new themify ultra vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing