High 7.1
2025-12-15< 1.3.1
Themify Portfolio Post <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Minimum safe version
1.3.1
Update to 1.3.1 or later to address 7 fixable vulnerabilities
Themify Portfolio Post <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2022-32970
CVE-2023-0362
WordPress Themify Portfolio Post Plugin < 1.2.1 is vulnerable to Cross Site Scripting (XSS)
WordPress Themify Portfolio Post plugin <= 1.1.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-24129
CVE-2022-0200