ThemeGrill vulnerabilities
We track 6 vulnerabilities in ThemeGrill products across 4 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest ThemeGrill vulnerabilities
- 9.8 Critical severity
Registration Form for WooCommerce: Improper Privilege Management
The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validate_checkout_fields() function in versions up to, and including, 1.1.4 The My Account registration path
- 7.1 High severity
eStore: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13.
- 7.1 High severity
User Registration: Missing Authorization
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.
- 8.8 High severity
Masteriyo - LMS: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Object Injection.This issue affects Masteriyo - LMS: from n/a through 3.4.0.
- 9.8 Critical severity
Masteriyo - LMS: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Upload a Web Shell to a Web Server.This issue affects Masteriyo - LMS: from n/a through 2.3.2.
- 8.8 High severity
Masteriyo - LMS: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0.