Themedy Toolbox

Themedy Toolbox

themedy-toolbox
WordPress Plugin DirectoryWordPress Plugin Directory
WordPress Pluginwordpress.org
themedy.comthemedy.com
Unavailable
This project is no longer available (or publicly accessible) from WordPress Plugin Directory
Releases5
Frequency2 years 6 months
Last Release
Downloads22.7K

Themedy Toolbox is a very powerful, yet easy to use shortcodes plugin. Shortcodes can be generated via the new Themedy button in your editor in the Visual tab of the WordPress editor.

You can add buttons, columns, social icons and links, accordions, toggles, tabs, alert boxes, pull quotes, responsive Youtube and Vimeo videos, and maps to your site by simply filling out a few options and clicking the Insert Shortcode button.

Please note that this plugin will work outside our Themedy themes, but we will not provide support for any issues with other themes.

Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-9177↗
6.4 MEDIUM—

The Themedy Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themedy_col, themedy_social_link, themedy_alertbox, and themedy_pullleft shortcodes in all versions up to, and including, 1.0.14, and up to, and including 1.0.15 for the plugin's themedy_button shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.