Vendor

Themify

1 brief RSS

Stored XSS in Themify Builder via css[fonts] Parameter

Themify Builder versions 7.8.1 and earlier are vulnerable to Stored Cross-Site Scripting (XSS) via the css[fonts] parameter, allowing unauthenticated attackers to inject malicious scripts due to exposed nonces.

Themify Builder web-vulnerability xss wordpress cve-2026-95864

1r 1t 1c 49m ago