CVE Tools
Track your stack

Themegrill

17 CVEs tracked since 2026. Since Jun 2026, none of them reached CISA KEV.

Themegrill CVEs per month

Jun 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Themegrill CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0680
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1090

Products

The products that kept showing up in Themegrill's monthly top three, with their CVEs summed over those months.

  1. User Registration102 months
  2. Masteriyo - Lms31 month
  3. User Registration Stripe21 month
  4. Estore11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Themegrill.

  1. CVE-2026-108485WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability7.1
  2. CVE-2026-105882WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability6.5
  3. CVE-2026-109692WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability7.1
  4. CVE-2026-109699WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability5.4
  5. CVE-2026-106598WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability5.3
  6. CVE-2026-105881WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability6.5
  7. CVE-2026-103076WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability5.4
  8. CVE-2026-106597WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability5.3
  9. CVE-2026-96334WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability5.6
  10. CVE-2026-78290WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability6.5
  11. CVE-2026-66606WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability7.1
  12. CVE-2025-9266Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation4.3
  13. CVE-2026-4804Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API6.4
  14. CVE-2026-52701WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability6.5
  15. CVE-2026-54807WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability9.8

The record

Peak rank
#140 in Oct 2026
Busiest month shown
Oct 2026, 9 CVEs
Months with a KEV entry
0 since Jun 2026
Monthly snapshots
2 since 2026
Themegrill's full record, month by month