CVE-2024-1047

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Feb 2, 2024
Source updated: Apr 8, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

ThemeIsle SDK <= Various Versions - Missing Authorization

Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated attackers to update options values that allow ThemeIsle to track promotional activities via utm_source.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Menu Icons by ThemeIsle

Vendor: themeisle
Product: Menu Icons by ThemeIsle
Platforms: Unknown
Default status: unaffected

Menu Icons by ThemeIsle · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	0.13.8	None listed

Starter Sites & Templates by Neve

Vendor: themeisle
Product: Starter Sites & Templates by Neve
Platforms: Unknown
Default status: unaffected

Starter Sites & Templates by Neve · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	1.2.6	None listed

Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

Vendor: themeisle
Product: Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Platforms: Unknown
Default status: unaffected

Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	2.6.2	None listed

LightStart – Maintenance Mode, Coming Soon and Landing Page Builder

Vendor: themeisle
Product: LightStart – Maintenance Mode, Coming Soon and Landing Page Builder
Platforms: Unknown
Default status: unaffected

LightStart – Maintenance Mode, Coming Soon and Landing Page Builder · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	2.6.9	None listed

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More

Vendor: themeisle
Product: Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
Platforms: Unknown
Default status: unaffected

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	2.10.28	None listed

Multiple Page Generator Plugin – MPG

Vendor: themeisle
Product: Multiple Page Generator Plugin – MPG
Platforms: Unknown
Default status: unaffected

Multiple Page Generator Plugin – MPG · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	3.4.0	None listed

Visualizer: Tables and Charts Manager for WordPress

Vendor: themeisle
Product: Visualizer: Tables and Charts Manager for WordPress
Platforms: Unknown
Default status: unaffected

Visualizer: Tables and Charts Manager for WordPress · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	3.10.6	None listed

Optimole – Optimize Images in Real Time

Vendor: optimole
Product: Optimole – Optimize Images in Real Time
Platforms: Unknown
Default status: unaffected

Optimole – Optimize Images in Real Time · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	3.12.4	None listed

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

Vendor: themeisle
Product: RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
Platforms: Unknown
Default status: unaffected

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	4.4.1	None listed

Super Page Cache

Vendor: optimole
Product: Super Page Cache
Platforms: Unknown
Default status: unaffected

Super Page Cache · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	4.7.5	None listed

Revive Social – Social Media Auto Post and Scheduling Automation Plugin

Vendor: rsocial
Product: Revive Social – Social Media Auto Post and Scheduling Automation Plugin
Platforms: Unknown
Default status: unaffected

Revive Social – Social Media Auto Post and Scheduling Automation Plugin · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	9.0.25	None listed

PPOM – Product Addons & Custom Fields for WooCommerce

Vendor: themeisle
Product: PPOM – Product Addons & Custom Fields for WooCommerce
Platforms: Unknown
Default status: unaffected

PPOM – Product Addons & Custom Fields for WooCommerce · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	32.0.9	None listed