Themify Builder

Уязвимости

• CVE-2024-24872без авторизации · нужен клик≤ 7.0.5

  WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-96831участник+≤ 7.8.1

  WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability

  Высокий 8.8

• CVE-2026-95864без авторизации≤ 7.8.1

  Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter

  Высокий 7.2

• CVE-2026-57369без авторизации · нужен клик≤ 7.7.4

  WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-56216нужен вход≤ 7.6.3

  WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability

  Средний 6.5

• CVE-2026-15097участник+≤ 7.7.6

  Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field

  Средний 6.4

• CVE-2026-15096участник+≤ 7.7.6

  Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field

  Средний 6.4

• CVE-2025-9353участник+≤ 7.6.9

  Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2024-13319без авторизации · нужен клик≤ 7.6.5

  Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-9385без авторизации · нужен клик≤ 7.6.2

  Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-52423нужен вход≤ 7.6.5

  WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2026-75027без авторизации≤ 7.8.0

  Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action

  Средний 5.3

• CVE-2026-15407подписчик+≤ 7.7.7

  Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action

  Средний 4.3

• CVE-2025-49396нужен вход≤ 7.6.7

  WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability

  Средний 4.3

• CVE-2024-7836участник+≤ 7.6.1

  Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication

  Средний 4.3