CVEs we hold for Themefusecom

Records whose assigning authority named Themefusecom as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-5324Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Valuethemefusecom Brizy – Page Builder

CVE-2026-32408WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerabilitythemefusecom Brizy

CVE-2026-2585Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameterthemefusecom Brizy – Page Builder

CVE-2025-58594WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerabilitythemefusecom Brizy

CVE-2025-4370Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Uploadthemefusecom Brizy – Page Builder

CVE-2025-32198WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerabilitythemefusecom Brizy

CVE-2025-0969Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Functionthemefusecom Brizy – Page Builder

CVE-2024-6254Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgerythemefusecom Brizy – Page Builder

CVE-2024-51645WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilitythemefusecom ThemeFuse Maintenance Mode

CVE-2024-3711Brizy – Page Builder <= 2.4.43 - Missing Authorizationthemefusecom Brizy – Page Builder

CVE-2024-3667Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URLthemefusecom Brizy – Page Builder

CVE-2024-3242Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Uploadthemefusecom Brizy – Page Builder

CVE-2024-2087Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Formthemefusecom Brizy – Page Builder

CVE-2024-1940Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scriptingthemefusecom Brizy – Page Builder

CVE-2024-1937Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modificationthemefusecom Brizy – Page Builder

CVE-2024-1311Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Uploadthemefusecom Brizy – Page Builder

CVE-2024-1296Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemefusecom Brizy – Page Builder

CVE-2024-1293Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemefusecom Brizy – Page Builder

CVE-2024-1291Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemefusecom Brizy – Page Builder

CVE-2024-1165Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversalthemefusecom Brizy – Page Builder

CVE-2024-1164Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionalitythemefusecom Brizy – Page Builder

CVE-2024-1161Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributesthemefusecom Brizy – Page Builder

CVE-2024-10960Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploadsthemefusecom Brizy – Page Builder

CVE-2024-10322Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadthemefusecom Brizy – Page Builder

CVE-2023-2897Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypassthemefusecom Brizy – Page Builder

CVE-2020-36714Brizy < 1.0.126 - Authorization Bypass to Settings Updatesthemefusecom Brizy – Page Builder

26 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.