CVE-2025-30996

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jan 6, 2026
Source updated: Apr 28, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Arbitrary File Upload Vulnerability in WordPress themes by Themify

Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify Edmin, Themify Bloggie, Themify Photobox, Themify Wigi, Themify Rezo, Themify Slide allows Upload a Web Shell to a Web Server.This issue affects Themify Sidepane WordPress Theme: from n/a through 1.9.8; Themify Newsy: from n/a through 1.9.9; Themify Folo: from n/a through 1.9.6; Themify Edmin: from n/a through 2.0.0; Bloggie: from n/a through 2.0.8; Photobox: from n/a through 2.0.1; Wigi: from n/a through 2.0.1; Rezo: from n/a through 1.9.7; Slide: from n/a through 1.7.5.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Themify Sidepane WordPress Theme

Vendor: Themify
Product: Themify Sidepane WordPress Theme
Platforms: Unknown
Default status: unaffected

Themify Sidepane WordPress Theme · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.9.8	None listed

Themify Newsy

Vendor: Themify
Product: Themify Newsy
Platforms: Unknown
Default status: unaffected

Themify Newsy · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.9.9	None listed

Themify Folo

Vendor: Themify
Product: Themify Folo
Platforms: Unknown
Default status: unaffected

Themify Folo · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.9.6	None listed

Themify Edmin

Vendor: Themify
Product: Themify Edmin
Platforms: Unknown
Default status: unaffected

Themify Edmin · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	2.0.0	None listed

Bloggie

Vendor: Themify
Product: Bloggie
Platforms: Unknown
Default status: unaffected

Bloggie · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	2.0.8	None listed

Photobox

Vendor: Themify
Product: Photobox
Platforms: Unknown
Default status: unaffected

Photobox · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	2.0.1	None listed

Wigi

Vendor: Themify
Product: Wigi
Platforms: Unknown
Default status: unaffected

Wigi · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	2.0.1	None listed

Rezo

Vendor: Themify
Product: Rezo
Platforms: Unknown
Default status: unaffected

Rezo · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.9.7	None listed

Slide

Vendor: Themify
Product: Slide
Platforms: Unknown
Default status: unaffected

Slide · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.7.5	None listed