How many themifyme Themify Builder CVEs are in CISA KEV?

None of themifyme Themify Builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of themifyme Themify Builder are affected?

26 distinct themifyme Themify Builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in themifyme Themify Builder CVEs?

themifyme Themify Builder's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-863 (Incorrect Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

What is the average severity of themifyme Themify Builder CVEs?

The average CVSS base score across themifyme Themify Builder's scored CVEs is 5.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

themifyme

11 CVEs

themifyme Themify Builder Vulnerabilities

Name: themifyme Themify Builder vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Themify Builder by themifyme.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.8

Avg CVSS

2024–2026

Last updated July 16, 2026

Overview

themifyme Themify Builder has 11 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting themifyme Themify Builder, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of themifyme Themify Builder's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of themifyme Themify Builder's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No themifyme Themify Builder CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every themifyme Themify Builder version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 7.6.52 CVEs
<= 7.7.62 CVEs
<= 7.6.11 CVE
<= 7.6.21 CVE
<= 7.6.31 CVE
<= 7.6.71 CVE
<= 7.6.91 CVE
<= 7.7.41 CVE
<= 7.7.71 CVE
>= 7.6.51 CVE
>= 7.6.61 CVE
>= 7.6.81 CVE
>= 7.7.51 CVE

Fixed in

> 7.6.52 CVEs
> 7.7.62 CVEs
> 7.6.11 CVE
> 7.6.21 CVE
> 7.6.31 CVE
> 7.6.71 CVE
> 7.6.91 CVE
> 7.7.41 CVE
> 7.7.71 CVE
7.6.51 CVE
7.6.61 CVE
7.6.81 CVE
7.7.51 CVE

Find a version

11 CVEs

Sort

Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action
CVE-2026-15407
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.3% (21th pct)2026-07-16
WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57369
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (7th pct)2026-07-13
Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field
CVE-2026-15096
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (9th pct)2026-07-11
Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field
CVE-2026-15097
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (10th pct)2026-07-11
Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9353
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (23th pct)2025-09-24
WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability
CVE-2025-49396
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.2% (14th pct)2025-08-20
Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting
CVE-2024-13319
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.3% (21th pct)2025-01-22
WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability
CVE-2024-56216
Patch
CWE-98
Medium · CVSS 6.5
EPSS 0.5% (37th pct)2024-12-31
WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-52423
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (14th pct)2024-11-18
Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting
CVE-2024-9385
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.4% (30th pct)2024-10-05
Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication
CVE-2024-7836
Patch
CWE-863
Medium · CVSS 4.3
EPSS 0.3% (21th pct)2024-08-22

Common weakness types

The CWE weakness categories most often found in themifyme Themify Builder CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many themifyme Themify Builder CVEs were published each year.

2024

4

2025

3

2026

4

Other themifyme products

Browse vulnerabilities for other products by themifyme.

Themify Event Post3 CVEs Themify Shortcodes3 CVEs Themify Audio Dock2 CVEs Themify – WooCommerce Product Filter2 CVEs Conditional Menus1 CVEs Themify Icons1 CVEs Themify Popup1 CVEs Themify Portfolio Post1 CVEs

All themifyme vulnerabilities

Frequently asked questions

Common questions about themifyme Themify Builder vulnerabilities.

How many CVEs does themifyme Themify Builder have?: themifyme Themify Builder has 11 published CVE records since 2024.
How many themifyme Themify Builder CVEs are in CISA KEV?: None of themifyme Themify Builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for themifyme Themify Builder vulnerabilities?: No themifyme Themify Builder CVEs currently have a tracked public exploit in this dataset.
Which versions of themifyme Themify Builder are affected?: 26 distinct themifyme Themify Builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in themifyme Themify Builder CVEs?: themifyme Themify Builder's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-863 (Incorrect Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
What is the average severity of themifyme Themify Builder CVEs?: The average CVSS base score across themifyme Themify Builder's scored CVEs is 5.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track themifyme Themify Builder vulnerabilities

Monitor new themifyme Themify Builder vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing