CVEs we hold for Themegrill
Records whose assigning authority named Themegrill as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-78290WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerabilityThemeGrill Magazine Blocks
CVE-2026-66606WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityThemeGrill SmartSMTP
CVE-2026-54807WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerabilityThemeGrill Registration Form for WooCommerce
CVE-2026-52701WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerabilityThemegrill User Registration
CVE-2026-49111WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerabilityThemeGrill Masteriyo - LMS
CVE-2026-49081WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerabilityThemeGrill User Registration Stripe
CVE-2026-4804Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST APIthemegrill Zakra
CVE-2026-42743WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerabilityThemeGrill Masteriyo - LMS
CVE-2026-40730WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerabilityThemeGrill Demo Importer
CVE-2026-40726WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerabilityThemeGrill User Registration Stripe
CVE-2026-39524WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerabilityThemeGrill Masteriyo - LMS
CVE-2026-25425WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerabilityThemeGrill User Registration
CVE-2025-9331Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Importthemegrill Spacious
CVE-2025-9266Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installationthemegrill Accelerate
CVE-2025-9202ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installationthemegrill ColorMag
CVE-2024-39629WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityThemeGrill Himalayas
CVE-2024-37432WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityThemeGrill Esteem
CVE-2024-34571WordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityThemeGrill Himalayas
CVE-2024-33540WordPress ColorNews theme <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityThemeGrill ColorNews
CVE-2024-2500ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Namethemegrill ColorMag
CVE-2024-1462Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST APIthemegrill Maintenance Page
CVE-2024-1370Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposurethemegrill Maintenance Page
CVE-2024-0679ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installationthemegrill ColorMag
CVE-2020-36837ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site ResetThemeGrill Demo Importer
25 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.