Themify Ultra

Themify Ultra has 5 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 5 are fixed as of September 2026. Their average CVSS score is 7.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2023 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (40%). Other recurring categories include Deserialization Of Untrusted Data, Improper Privilege Management.

Every one of the 5 issues recorded for Themify Ultra has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Rafie Muhammad.

Strategic Overview

Avg CVSSHigh

7.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Themify Ultra vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2023-46147

Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection

Read the full analysis

Vulnerability Records

5 records


2023-10-17 00:00	Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection Themify Ultra <= 7.3.5	`CVE-2023-46147`	8.8 High	Rafie Muhammad	Yes
2023-10-17 00:00	Themify Ultra <= 7.3.5 - Missing Authorization Themify Ultra <= 7.3.5	`CVE-2023-46148`	5.4 Medium	Rafie Muhammad	Yes
2023-10-17 00:00	Themify Ultra <= 7.3.5 - Missing Authorization Themify Ultra <= 7.3.5	`CVE-2023-46146`	5.4 Medium	Rafie Muhammad	Yes
2023-10-17 00:00	Themify Ultra <= 7.3.5 - Privilege Escalation Themify Ultra <= 7.3.5	`CVE-2023-46145`	8.8 High	Rafie Muhammad	Yes
2023-10-17 00:00	Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) Arbitrary File Upload Themify Ultra <= 7.3.5	`CVE-2023-46149`	8.8 High	Rafie Muhammad	Yes

Showing 1–5 of 5 reports