CVE Intelligence

Themepoints vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Themepoints products: 6 record(s), with severity, exploitation and fixes.

Logo Showcase 2Team Showcase 1Carousel Ultimate 1Accordion 1Tab Ultimate 1

Exploited only (KEV) →

CVE-2026-105060 Medium · 6.5 CWE-79 Oct 5, 2026
WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4.
CVE-2025-69350 Medium · 5.9 CWE-79 Jan 6, 2026
WordPress Accordion plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Accordion accordions-wp allows Stored XSS.This issue affects Accordion: from n/a through <= 3.0.3.
CVE-2025-69335 Medium · 6.5 CWE-79 Jan 6, 2026
WordPress Team Showcase plugin <= 2.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Team Showcase team-showcase allows Stored XSS.This issue affects Team Showcase: from n/a through <= 2.9.
CVE-2025-62060 Medium · 6.5 CWE-79 Oct 22, 2025
WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through <= 1.8.
CVE-2025-58684 Medium · 6.5 CWE-79 Sep 22, 2025
WordPress Logo Showcase plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through <= 4.0.1.
CVE-2025-58652 Medium · 6.5 CWE-79 Sep 22, 2025
WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through <= 1.8.