CVE Tools
Track your stack

Themehunk

4 CVEs tracked since 2024. Since Dec 2024, none of them reached CISA KEV.

Themehunk CVEs per month

Dec 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Themehunk CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-1240
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Themehunk's monthly top three, with their CVEs summed over those months.

  1. Hunk Companion11 month
  2. Th Variation Swatches11 month
  3. Variation Swatches11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Themehunk.

  1. CVE-2026-111838WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability7.1
  2. CVE-2026-105883WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability7.1
  3. CVE-2026-66607WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability7.1
  4. CVE-2026-12753Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection via 's' and 'match' Parameter7.5
  5. CVE-2026-57405WordPress Open Shop theme <= 1.7.1 - Broken Access Control vulnerability7.1
  6. CVE-2026-14250Themehunk Login Registration <= 1.0.2 - Unauthenticated Privilege Escalation via 'role' Parameter6.3
  7. CVE-2026-56070WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability9.3
  8. CVE-2023-25969WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken Access Control vulnerability5.4
  9. CVE-2026-32532WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability7.1
  10. CVE-2026-25438WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  11. CVE-2026-1454Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting7.2
  12. CVE-2025-68046WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Sensitive Data Exposure vulnerability6.5
  13. CVE-2025-69344WordPress Oneline Lite theme <= 6.6 - Broken Access Control vulnerability4.3
  14. CVE-2025-12040Wishlist for WooCommerce <= 1.1.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation6.5
  15. CVE-2025-62902WordPress WP Popup Builder plugin <= 1.3.8 - Sensitive Data Exposure vulnerability5.3

The record

Peak rank
#186 in Dec 2024
Busiest month shown
Dec 2024, 4 CVEs
Months with a KEV entry
0 since Dec 2024
Monthly snapshots
1 since 2024
Themehunk's full record, month by month