Themify Portfolio Post
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Themify Portfolio Post.
By the Year
In 2026 there have been 0 vulnerabilities in Themify Portfolio Post. Portfolio Post did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 3 | 4.97 |
| 2022 | 1 | 5.40 |
| 2021 | 1 | 5.40 |
It may take a day or so for new Portfolio Post vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Themify Portfolio Post Security Vulnerabilities
Stored XSS in Themify Portfolio Post <=1.2.4
CVE-2022-32970
4.1 - Medium
- May 10, 2023
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Themify Themify Portfolio Post plugin <= 1.2.4 versions.
XSS
Stored XSS in Themify Portfolio Post before 1.2.2 Shortcode Attributes
CVE-2023-0362
5.4 - Medium
- February 13, 2023
Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
XSS
Stored XSS via unescaped shortcode attributes in Themify Portfolio Post <1.2.1
CVE-2022-4464
5.4 - Medium
- January 16, 2023
Themify Portfolio Post WordPress plugin before 1.2.1 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privileged users such as admin.
XSS
Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the response of the themify_create_popup_page_pagination AJAX action (available to any authenticated user)
CVE-2022-0200
5.4 - Medium
- February 14, 2022
Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the response of the themify_create_popup_page_pagination AJAX action (available to any authenticated user), leading to a Reflected Cross-Site Scripting
XSS
Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS) vulnerabilities
CVE-2021-24129
5.4 - Medium
- March 18, 2021
Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS) vulnerabilities allowing low-privileged users (Contributor+) to inject arbitrary JavaScript code or HTML in posts where the Themify Custom Panel is embedded, which could lead to privilege escalation.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Themify Portfolio Post or by Themify? Click the Watch button to subscribe.
