Themefic
Themefic Security Releases - October 2026
themefic-2026-10 Oct 1, 2026 Source: Vendor
Themefic security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-103480
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-103480
BR2026-0000-033236
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental
unclaimed
The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to, and including, ...
Credited as Wordfence PRISM
CVE-2026-103999
BR2026-0000-033239
Ultra Addons for Contact Form 7
unclaimed
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to, and including, 3.5.54 due to insufficient input sanitiza...
Credited as Kuba