WPSA-24-082
High Severity
Stored XSS in ThemeY Options
Vulnerability Type: Stored Cross-Site Scripting (XSS)
Published: Jul 2026
Remediation Action
Update ThemeY to version 1.8.9 or patch options-save.php.
Complete details of the vulnerability report: Stored XSS in ThemeY Options (WPSA-24-082). Under our coordinated disclosure guidelines, remediation should be prioritized according to risk rating.