CVE Tools
Track your stack

Ithemes

19 CVEs tracked since 2013. Since Apr 2013, none of them reached CISA KEV.

Ithemes CVEs per month

Apr 2013 to Aug 2019. Point at a month, or focus the strip and use the arrow keys.
Ithemes CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2013-0440
2013-05null or fewer
2013-06null or fewer
2013-07null or fewer
2013-08null or fewer
2013-09null or fewer
2013-10null or fewer
2013-11null or fewer
2013-12null or fewer
2014-01null or fewer
2014-02null or fewer
2014-03null or fewer
2014-04null or fewer
2014-05null or fewer
2014-06null or fewer
2014-07null or fewer
2014-08null or fewer
2014-09null or fewer
2014-10null or fewer
2014-11null or fewer
2014-12null or fewer
2015-01null or fewer
2015-02null or fewer
2015-03null or fewer
2015-04null or fewer
2015-05null or fewer
2015-06null or fewer
2015-07null or fewer
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-11null or fewer
2015-12null or fewer
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08150

Products

The products that kept showing up in Ithemes's monthly top three, with their CVEs summed over those months.

  1. Backupbuddy41 month
  2. Builder Theme Depot11 month
  3. Exchange11 month
  4. Invoices11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Ithemes.

  1. CVE-2025-49895WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability6.5
  2. CVE-2022-45825WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS)7.1
  3. CVE-2022-31474WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal7.5
  4. CVE-2022-4897BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting6.1
  5. CVE-2020-36176The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.7.5
  6. CVE-2020-14092The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.9.8
  7. CVE-2015-9379iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  8. CVE-2015-9378iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  9. CVE-2015-9377iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  10. CVE-2015-9376iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  11. CVE-2015-9375Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  12. CVE-2015-9374Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  13. CVE-2015-9372Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  14. CVE-2015-9371Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1
  15. CVE-2015-9370Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().6.1

The record

Peak rank
#25 in Apr 2013
Busiest month shown
Aug 2019, 15 CVEs
Months with a KEV entry
0 since Apr 2013
Monthly snapshots
2 since 2013
Ithemes's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store