Themefusecom vulnerabilities
We track 5 vulnerabilities in Themefusecom products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2026.
Latest Themefusecom vulnerabilities
- 7.2 High severity
Brizy – Page Builder: Improper Neutralization of Input During Web Page Generation
The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to, and including, 2.8.11 This is due to a combination of missing nonce verification for unauthenticated form submissions, insufficien
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all versions up to, and including, 2.6.4. This makes it possible for authenticated attackers, with Contr
- 7.1 High severity
ThemeFuse Maintenance Mode: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in themefusecom ThemeFuse Maintenance Mode themefuse-maintenance-mode allows Stored XSS.This issue affects ThemeFuse Maintenance Mode: from n/a through <= 1.1.3.
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeImages function in all versions up to, and including, 2.4.40. This makes it possible for authenticated attackers, with contrib