Themify Edmin vulnerabilities

Latest Themify Edmin CVEs

Newest publication first

1. CVE-2025-30996 Arbitrary File Upload Vulnerability in WordPress themes by Themify

   Published 2026-01-06

   Critical·CVSS 9.9 EPSS 0.51%

   Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify Edmin, Themify Bloggie, Themify Photobox, Themify Wigi, Themify Rezo, Themify Slide allows Upload a Web Shell to...

2. CVE-2025-31047 WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

   Published 2026-01-05

   High·CVSS 8.8 EPSS 0.36%

   Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.