Themes4WP vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Themes4WP products: 1 record(s), with severity, exploitation and fixes.

Popularis Extra 1

Exploited only (KEV) →

CVE-2026-25422 Medium · 5.4 CWE-352 Feb 19, 2026

WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through <= 1.2.10.