Themesgrove vulnerabilities
We track 2 vulnerabilities in Themesgrove products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Themesgrove vulnerabilities
- 7.1 High severity
WidgetKit Pro: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit Pro allows Reflected XSS.This issue affects WidgetKit Pro: from n/a through 1.13.1.
- 7.2 High severity
Onepage Builder: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themesgrove Onepage Builder allows SQL Injection.This issue affects Onepage Builder: from n/a through 2.4.1.