ThemeGrill Demo Importer < 1.6.2 - Database Reset

ThemeGrill Demo Importer before 1.6.2 does not require authentication for wiping the database due to a resetwizardactions hook. In versions 1.3.4 and above and versions 1.6.1 and below, there is a vulnerability that allows any unauthenticated user to wipe the entire database to its default state...

CVE-2026-25450

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0...

EUVD-2026-112876

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0...

CVE-2026-25450 WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0...

CVE-2026-25467

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in ThemeGrill User Registration user-registration allows Code Injection.This issue affects User Registration: from n/a through 5.3.0...

CVE-2026-25467 WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in ThemeGrill User Registration user-registration allows Code Injection.This issue affects User Registration: from n/a through 5.3.0...

CVE-2026-25467

The ThemeGrill User Registration WordPress plugin (versions up to and including 5.3.0 ) is vulnerable to a Basic XSS (Cross-Site Scripting) vulnerability due to Improper Neutralization of Script-Related HTML Tags in a web page. This flaw allows for Code Injection within the user-registration comp...

EUVD-2026-112913

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in ThemeGrill User Registration user-registration allows Code Injection.This issue affects User Registration: from n/a through 5.3.0...

CVE-2026-108485

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13...

CVE-2026-108485 WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13...

EUVD-2026-103422

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13...

CVE-2026-108485 WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13...

CVE-2026-108485

The ThemeGrill eStore WordPress theme (versions ≤ 1.6.13 ) is susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This flaw allows an attacker to inject malicious scripts into the web page. No specific remediation...

PT-2026-116587

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13...

CVE-2026-108485: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13...

ThemeGrill eStore Cross-Site Scripting Vulnerability

ThemeGrill eStore versions 1.6.13 and earlier have a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, which may lead to reflection-type cross-site scripting attacks...

CVE-2026-109692

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-105882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-105882

The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue stems from the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts that are stored on...

EUVD-2026-102049

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...