What’s Vulnerable › Products

themifyme Themify Popup vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your themifyme Themify Popup version is affected

Latest themifyme Themify Popup vulnerabilities

• CVE-2026-109989 — Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter (CVSS 6.4)
• CVE-2026-56037 — WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2025-58787 — WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)