Visualizer (Themeisle) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 111 known versions, newest CVE from 2026-07-23. Vendor: Themeisle.
CVEs of Visualizer
- CVE-2026-65526 - CVSS 8.5 (high), 2026-07-23: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer allows Blind SQL Injection. This…
- CVE-2026-24573 - CVSS 6.5 (medium), 2026-05-20: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Stored XSS. This issue…
- CVE-2024-35736 - CVSS 8.8 (high), 2024-06-08: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer.This issue affects Visualizer: from…
- CVE-2024-27958 - CVSS 7.1 (high), 2024-03-17: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Reflected XSS.This issue…
- CVE-2023-23708 - CVSS 6.5 (medium), 2023-05-03: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.4 versions.
- CVE-2022-46848 - CVSS 6.5 (medium), 2023-03-28: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.1 versions.
- CVE-2022-2444 - CVSS 8.8 (high), 2022-07-18: The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data'…
- CVE-2019-16931 - CVSS 6.1 (medium), 2019-10-03: A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or…
- CVE-2019-16932 - CVSS 10 (critical), 2019-09-30: A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.
