Th Shop Mania vulnerabilities

2 known vulnerabilities in Th Shop Mania from ThemeHunk. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Th Shop Mania: Missing Authorization

  CVE-2026-105883Oct 9, 2026ThemeHunk

  Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Th Shop Mania: from n/a through 1.9.1.

• 8.8 High severity

  Th Shop Mania: Missing Authorization

  CVE-2024-10674Nov 9, 2024ThemeHunkEPSS 1.73%

  The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_install_and_activate_callback() function in all versions up to, and including, 1.4.9. This makes it possibl