Themegrill
8 CVEs tracked since 2026. Since Jun 2026, none of them reached CISA KEV.
Themegrill CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-06 | 8 | 0 |
Products
The products that kept showing up in Themegrill's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Themegrill.
- CVE-2026-78290WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2026-66606WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2025-9266Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation4.3
- CVE-2026-4804Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API6.4
- CVE-2026-52701WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability6.5
- CVE-2026-54807WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability9.8
- CVE-2026-49081WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerability8.2
- CVE-2026-40726WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerability8.2
- CVE-2026-42743WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability6.5
- CVE-2026-39524WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability7.5
- CVE-2026-25425WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability7.5
- CVE-2026-49111WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability8.8
- CVE-2026-40730WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerability5.3
- CVE-2025-9331Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import4.3
- CVE-2025-9202ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation4.3
The record
- Peak rank
- #188 in Jun 2026
- Busiest month shown
- Jun 2026, 8 CVEs
- Months with a KEV entry
- 0 since Jun 2026
- Monthly snapshots
- 1 since 2026