Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how themefic compares to other vendors in security performance

View Risk Score →

Themefic Hydra BookingWordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability

Risk 51
Severity
7.3
First published (updated )
CVE-2026-42675

Themefic InstantioWordPress Instantio plugin <= 3.3.30 - Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-39571

Themefic TourficWordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-39543

Themefic Hydra BookingWordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

Risk 51
Severity
7.3
First published (updated )
CVE-2025-68027

Themefic Hydra BookingWordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2025-68055
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themefic Hydra BookingWordPress Hydra Booking plugin <= 1.1.9 - Broken Access Control vulnerability

Risk 46
Severity
6.3
First published (updated )
CVE-2025-49377

Themefic Hydra BookingWordPress Hydra Booking plugin <= 1.1.10 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2025-49378

Ultra Addons Contact Form 7Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode

Risk 28
Severity
6.4
EPSS
0.03%
First published (updated )
CVE-2025-6756

Ultra Addons Contact Form 7Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module

Risk 31
Severity
7.2
EPSS
0.10%
First published (updated )
CVE-2025-6212

Ultra Addons Contact Form 7Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

Risk 49
Severity
7.2
EPSS
0.42%
First published (updated )
CVE-2025-6220
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themefic Hydra BookingWordPress Hydra Booking plugin <= 1.1.10 - SQL Injection Vulnerability

Risk 40
Severity
8.5
EPSS
0.03%
First published (updated )
CVE-2025-49323

Themefic Instantio WordpressWordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload Vulnerability

Risk 49
Severity
7.2
EPSS
0.06%
First published (updated )
CVE-2025-47550

Themefic BEAFWordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability

Risk 49
Severity
9.1
EPSS
0.06%
First published (updated )
CVE-2025-47549

Themefic InstantioWordPress Instantio plugin <= 3.3.7 - Settings Change vulnerability

Risk 40
Severity
6.5
First published (updated )
CVE-2025-24581

Themefic Travelfic ToolkitWordPress Travelfic Toolkit plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

Risk 34
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2025-39585
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themefic TourficWordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability

Risk 36
Severity
9.1
EPSS
0.04%
First published (updated )
CVE-2025-24650

Themefic Tourfic WordpressTourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection

Risk 38
Severity
6.5
First published (updated )
CVE-2024-12032

Themefic Tourfic WordpressWordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability

Risk 25
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2024-29134

Themefic Tourfic WordpressWordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability

Risk 56
Severity
9.9
EPSS
0.04%
First published (updated )
CVE-2024-29135

Themefic Tourfic WordpressWordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2024-29136
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themefic Tourfic WordpressWordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 27
Severity
7.1
EPSS
0.04%
First published (updated )
CVE-2024-29137

Themefic Ultimate Addons For Contact Form 7 WordpressWordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

Risk 55
Severity
8.5
First published (updated )
CVE-2023-30495

Themefic Ultimate Addons For Contact Form 7 WordpressWordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
First published (updated )
CVE-2023-49766

Themefic Ultimate Addons For Contact Form 7 WordpressWordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
First published (updated )
CVE-2023-30493

Themefic Ultimate Addons For Contact Form 7 WordpressUltimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2023-2802
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themefic Ultimate Addons For Contact Form 7 WordpressUltimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-2803

Themefic Ultimate Addons For Contact Form 7 WordpressWordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2022-47586

Themefic Ultimate Addons For Contact Form 7 WordpressSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2023-1615

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203