TH
Vendor
Themekraft
32
CVEs
0
On KEV
0
New 30D
Products
BU9.8
BuddyForms
Themekraft
12 CVEs0 on KEV0 new
PF8.8
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
4 CVEs0 on KEV0 new
BW8.8
Buddypress Woocommerce MY Account Integration
Themekraft
3 CVEs0 on KEV0 new
BW8.8
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages
themekraft
3 CVEs0 on KEV0 new
PF8.2
Post Form
Themekraft
3 CVEs0 on KEV0 new
PF8.8
Post Form Registration Form Profile Form For User Profiles And Content Forms
Themekraft
3 CVEs0 on KEV0 new
WO8.8
WooBuddy
ThemeKraft
2 CVEs0 on KEV0 new
AI6.3
All in One Invite Codes
themekraft
1 CVEs0 on KEV0 new
TG8.8
TK Google Fonts Gdpr Compliant
Themekraft
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81785 | BU BuddyForms Themekraft | 6.5 | Sep 10 | WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability |
| CVE-2025-62973 | BU BuddyForms Themekraft | 5.3 | Oct 27 | WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability |
| CVE-2025-32151 | BU BuddyForms Themekraft | 8.8 | Apr 4 | WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability |
| CVE-2025-1780 | BW BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages themekraft | 4.3 | Mar 1 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update |
| CVE-2024-13358 | BW BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages themekraft | 4.3 | Mar 1 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update |
| CVE-2024-12038 | PF Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) themekraft | 5.4 | Feb 22 | Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode |
| CVE-2024-12037 | PF Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) themekraft | 6.4 | Jan 31 | Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2022-4974 | AI All in One Invite Codes themekraft | 6.3 | Oct 16 | Freemius SDK <= 2.4.2 - Missing Authorization Checks |
| CVE-2024-47377 | BU BuddyForms Themekraft | 5.4 | Oct 5 | WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-8246 | PF Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) themekraft | 8.8 | Sep 14 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation |
| CVE-2024-35726 | WO WooBuddy ThemeKraft | 8.8 | Jun 10 | WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability |
| CVE-2024-5149 | PF Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) themekraft | 5.3 | Jun 5 | BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness |
| CVE-2024-32830 | BU BuddyForms ThemeKraft | 7.5 | May 17 | WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability |
| CVE-2024-32603 | WO WooBuddy ThemeKraft | 8.8 | Apr 18 | WordPress WooBuddy plugin <= 3.4.20 - PHP Object Injection vulnerability |
| CVE-2024-30198 | BU Buddyforms Themekraft | 6.1 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeKraft BuddyForms allows Reflected XSS.This issue affects BuddyForms:… |
| CVE-2024-1158 | BU Buddyforms Themekraft | 4.3 | Mar 13 | The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized… |
| CVE-2024-1170 | PF Post Form Themekraft | 8.2 | Mar 7 | The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media… |
| CVE-2024-1169 | PF Post Form Themekraft | 7.5 | Mar 7 | The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media… |
| CVE-2023-5823 | TG TK Google Fonts Gdpr Compliant Themekraft | 8.8 | Nov 6 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin <= 2.2.11 versions |
| CVE-2023-25981 | PF Post Form Themekraft | 5.4 | Aug 25 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form plugin <= 2.8.1 versions |
| CVE-2022-38971 | PF Post Form Registration Form Profile Form For User Profiles And Content Forms Themekraft | 5.4 | Mar 16 | Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5… |
| CVE-2023-26326 | BU Buddyforms Themekraft | 9.8 | Feb 23 | The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue |
| CVE-2018-21003 | BU Buddyforms Themekraft | 9.8 | Aug 27 | The buddyforms plugin before 2.2.8 for WordPress has SQL injection |