{"schema_version":1,"title":"Themeisle Visualizer: Tables and Charts Manager for WordPress vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Themeisle Visualizer: Tables and Charts Manager for WordPress: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86784, was published on 16 September 2026.","url":"https://junglewise.ai/threats/technologies/visualizer","json_url":"https://junglewise.ai/threats/technologies/visualizer.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/visualizer","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":3,"last_90_days":6,"last_365_days":8},"latest":[{"cve":"CVE-2026-86784","cvss":6.8,"epss":0.0043,"slug":"cve-2026-86784-visualizer-wordpress-plugin-stored-xss-in-json-data-source","title":"Visualizer WordPress plugin stored XSS in JSON data source","severity":"medium","exploited":false,"published_at":"2026-09-16T06:16:34.95+00:00","url":"https://junglewise.ai/threats/cve-2026-86784-visualizer-wordpress-plugin-stored-xss-in-json-data-source"},{"cve":"CVE-2026-86782","cvss":5.5,"epss":0.0031,"slug":"cve-2026-86782-visualizer-wordpress-plugin-privilege-escalation-via-idor","title":"Visualizer WordPress plugin privilege escalation via IDOR","severity":"medium","exploited":false,"published_at":"2026-09-11T07:16:47.643+00:00","url":"https://junglewise.ai/threats/cve-2026-86782-visualizer-wordpress-plugin-privilege-escalation-via-idor"},{"cve":"CVE-2026-86779","cvss":2.7,"epss":0.0028,"slug":"cve-2026-86779-visualizer-wordpress-plugin-authorization-bypass-in-chart","title":"Visualizer WordPress plugin authorization bypass in chart deletion","severity":"low","exploited":false,"published_at":"2026-09-11T07:16:47.343+00:00","url":"https://junglewise.ai/threats/cve-2026-86779-visualizer-wordpress-plugin-authorization-bypass-in-chart"},{"cve":"CVE-2026-15653","cvss":6.4,"slug":"cve-2026-15653-themeisle-visualizer-stored-xss-in-backend-title-parameter","title":"ThemeIsle Visualizer Stored XSS in backend-title parameter","severity":"medium","exploited":false,"published_at":"2026-07-24T08:16:26.28+00:00","url":"https://junglewise.ai/threats/cve-2026-15653-themeisle-visualizer-stored-xss-in-backend-title-parameter"},{"cve":"CVE-2026-65526","cvss":8.5,"slug":"cve-2026-65526-themeisle-visualizer-sql-injection-in-wordpress-plugin","title":"Themeisle Visualizer SQL injection in WordPress plugin","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:45.393+00:00","url":"https://junglewise.ai/threats/cve-2026-65526-themeisle-visualizer-sql-injection-in-wordpress-plugin"},{"cve":"CVE-2026-13468","cvss":7.5,"slug":"cve-2026-13468-themeisle-visualizer-authorization-bypass-in-rest-api","title":"ThemeIsle Visualizer authorization bypass in REST API","severity":"high","exploited":false,"published_at":"2026-07-01T05:16:18.663+00:00","url":"https://junglewise.ai/threats/cve-2026-13468-themeisle-visualizer-authorization-bypass-in-rest-api"},{"cve":"CVE-2026-8689","cvss":4.3,"slug":"cve-2026-8689-themeisle-visualizer-missing-authorization-in-chart-management","title":"ThemeIsle Visualizer missing authorization in chart management functions","severity":"medium","exploited":false,"published_at":"2026-05-28T09:16:48.973+00:00","url":"https://junglewise.ai/threats/cve-2026-8689-themeisle-visualizer-missing-authorization-in-chart-management"},{"cve":"CVE-2026-24573","cvss":6.5,"slug":"cve-2026-24573-themeisle-visualizer-stored-xss-in-wordpress-plugin","title":"Themeisle Visualizer Stored XSS in WordPress plugin","severity":"medium","exploited":false,"published_at":"2026-05-20T13:16:16.253+00:00","url":"https://junglewise.ai/threats/cve-2026-24573-themeisle-visualizer-stored-xss-in-wordpress-plugin"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Themeisle Orbit Fox","slug":"orbit-fox","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/orbit-fox"},{"name":"Themeisle RSS Aggregator by Feedzy","slug":"rss-aggregator-by-feedzy","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rss-aggregator-by-feedzy"}],"technology":{"hub":true,"name":"Themeisle Visualizer: Tables and Charts Manager for WordPress","slug":"visualizer","vendor":{"name":"Themeisle","slug":"themeisle","url":"https://junglewise.ai/threats/vendors/themeisle"},"aliases":["visualizer-tables-and-charts-manager-for-wordpress","visualizer-tables-charts-manager-with-built-in-ai-generator"],"category":"library","homepage":"https://themeisle.com/plugins/visualizer/","repo_url":"https://github.com/Codeinwp/visualizer","description":"A WordPress plugin for creating, managing, and embedding interactive charts and tables into posts and pages.","url":"https://junglewise.ai/threats/technologies/visualizer"},"most_severe":[{"cve":"CVE-2026-65526","cvss":8.5,"slug":"cve-2026-65526-themeisle-visualizer-sql-injection-in-wordpress-plugin","title":"Themeisle Visualizer SQL injection in WordPress plugin","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:45.393+00:00","url":"https://junglewise.ai/threats/cve-2026-65526-themeisle-visualizer-sql-injection-in-wordpress-plugin"},{"cve":"CVE-2026-13468","cvss":7.5,"slug":"cve-2026-13468-themeisle-visualizer-authorization-bypass-in-rest-api","title":"ThemeIsle Visualizer authorization bypass in REST API","severity":"high","exploited":false,"published_at":"2026-07-01T05:16:18.663+00:00","url":"https://junglewise.ai/threats/cve-2026-13468-themeisle-visualizer-authorization-bypass-in-rest-api"},{"cve":"CVE-2026-86784","cvss":6.8,"epss":0.0043,"slug":"cve-2026-86784-visualizer-wordpress-plugin-stored-xss-in-json-data-source","title":"Visualizer WordPress plugin stored XSS in JSON data source","severity":"medium","exploited":false,"published_at":"2026-09-16T06:16:34.95+00:00","url":"https://junglewise.ai/threats/cve-2026-86784-visualizer-wordpress-plugin-stored-xss-in-json-data-source"},{"cve":"CVE-2026-24573","cvss":6.5,"slug":"cve-2026-24573-themeisle-visualizer-stored-xss-in-wordpress-plugin","title":"Themeisle Visualizer Stored XSS in WordPress plugin","severity":"medium","exploited":false,"published_at":"2026-05-20T13:16:16.253+00:00","url":"https://junglewise.ai/threats/cve-2026-24573-themeisle-visualizer-stored-xss-in-wordpress-plugin"},{"cve":"CVE-2026-15653","cvss":6.4,"slug":"cve-2026-15653-themeisle-visualizer-stored-xss-in-backend-title-parameter","title":"ThemeIsle Visualizer Stored XSS in backend-title parameter","severity":"medium","exploited":false,"published_at":"2026-07-24T08:16:26.28+00:00","url":"https://junglewise.ai/threats/cve-2026-15653-themeisle-visualizer-stored-xss-in-backend-title-parameter"},{"cve":"CVE-2026-86782","cvss":5.5,"epss":0.0031,"slug":"cve-2026-86782-visualizer-wordpress-plugin-privilege-escalation-via-idor","title":"Visualizer WordPress plugin privilege escalation via IDOR","severity":"medium","exploited":false,"published_at":"2026-09-11T07:16:47.643+00:00","url":"https://junglewise.ai/threats/cve-2026-86782-visualizer-wordpress-plugin-privilege-escalation-via-idor"},{"cve":"CVE-2026-8689","cvss":4.3,"slug":"cve-2026-8689-themeisle-visualizer-missing-authorization-in-chart-management","title":"ThemeIsle Visualizer missing authorization in chart management functions","severity":"medium","exploited":false,"published_at":"2026-05-28T09:16:48.973+00:00","url":"https://junglewise.ai/threats/cve-2026-8689-themeisle-visualizer-missing-authorization-in-chart-management"},{"cve":"CVE-2026-86779","cvss":2.7,"epss":0.0028,"slug":"cve-2026-86779-visualizer-wordpress-plugin-authorization-bypass-in-chart","title":"Visualizer WordPress plugin authorization bypass in chart deletion","severity":"low","exploited":false,"published_at":"2026-09-11T07:16:47.343+00:00","url":"https://junglewise.ai/threats/cve-2026-86779-visualizer-wordpress-plugin-authorization-bypass-in-chart"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}