themepunch

Top products

The 15 most recently published vulnerabilities affecting themepunch.

• CVE-2026-57678WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability7.1Jul 2, 2026
• CVE-2024-8107Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4Oct 1, 2024
• CVE-2024-37449WordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability5.9Jul 21, 2024
• CVE-2024-34444WordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability7.1Jun 19, 2024
• CVE-2024-34443WordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerability5.9Jun 19, 2024
• CVE-2024-4637Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex6.4Jun 4, 2024
• CVE-2024-4581Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes6.4Jun 4, 2024
• CVE-2024-4092Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter6.4May 2, 2024
• CVE-2024-3235Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure5.3Apr 10, 2024
• CVE-2023-6528Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE8.8Jan 8, 2024
• CVE-2023-47784WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload8.4Dec 20, 2023
• CVE-2023-47772WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)6.5Nov 20, 2023
• CVE-2023-47684WordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)7.1Nov 13, 2023
• CVE-2023-2359Revolution Slider <= 6.6.12 - Author+ Remote Code Execution8.8Jun 19, 2023
• CVE-2015-9499The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.9.8Oct 22, 2019