← WordPress Vulnerabilities
WordPress security by component

Themify Folo

Themify Folo is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 17, 2026; the highest CVE/CNA score is 7.1.

Theme slug: folo

CVE-2025-31013: Themify Folo: Cross-site scripting

Themify Folo is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 1.9.6.

PublishedJun 17, 2026
Known safe version> 1.9.6
Safe version
Jun 17, 2026 CVE-2025-31013
Themify Folo: Cross-site scripting
Themify Folo is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 1.9.6.
> 1.9.6
CVE7.1
NVDPending