WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
theme-duplicator
Published
2025-04-01
Title
Theme Duplicator <= 1.1 - Cross-Site Request Forgery
Slug
theme-editor
Published
2019-09-30
Title
Theme Editor < 2.2 - Multiple Vulnerabilities
Slug
theme-editor
Published
2021-02-13
Title
Theme Editor < 2.6 - Authenticated Arbitrary File Download
Slug
theme-editor
Published
2023-11-20
Title
Theme Editor < 2.8 - Admin+ Arbitrary File Upload
Slug
theme-editor
Published
2024-08-28
Title
Theme Editor < 2.9 - Authenticated (Admin+) PHAR Deserialization
Slug
theme-editor
Published
2025-10-17
Title
Theme Editor < 3.1 - Cross-Site Request Forgery to Remote Code Execution
Slug
theme-file-duplicator
Published
2025-02-21
Title
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Download
Slug
theme-file-duplicator
Published
2025-02-21
Title
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
theme-importer
Published
2025-10-14
Title
Theme Importer <= 1.0 - Cross-Site Request Forgery
Slug
theme-junkie-shortcodes
Published
2024-01-03
Title
TJ Shortcodes <= 0.1.3 - Contributor+ Stored XSS via Shortcodes
Slug
theme-junkie-team-content
Published
2025-06-27
Title
Theme Junkie Team Content <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
theme-my-login
Published
2014-08-01
Title
Theme My Login 6.3.9 - Local File Inclusion
Slug
theme-my-login
Published
2024-04-15
Title
Theme My Login < 7.1.7 - Missing Authorization to Notice Dismissal
Slug
theme-my-login
Published
2024-08-15
Title
Theme My Login < 7.1.8 - Cross-Site Request Forgery to Settings Update
Slug
theme-my-login
Published
2025-09-26
Title
Theme My Login < 7.1.13 - Missing Authorization
Slug
theme-my-ontraport-smartform
Published
2025-01-16
Title
Theme My Ontraport Smartform <= 1.2.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
theme-options-z
Published
2025-02-03
Title
Theme Options Z <= 1.4 - Cross-Site Request Forgery
Slug
theme-per-user
Published
2023-12-29
Title
Theme per user < 1.0.2 - Unauthenticated PHP Object Injection
Slug
theme-switcha
Published
2023-10-16
Title
Theme Switcha < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
theme-switcha
Published
2025-04-22
Title
Theme Switcha < 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
theme-switcher-reloaded
Published
2025-08-25
Title
Theme Switcher Reloaded <= 1.1 - Reflected Cross-Site Scripting
Slug
theme-test-drive
Published
2015-11-23
Title
Theme Test Drive <= 2.9 - Authenticated File Upload & XSS
Slug
theme-tuner
Published
2012-01-23
Title
Theme Tuner < 0.8 - Remote File Inclusion
Slug
theme-tweaker-lite
Published
2023-02-20
Title
Theme Tweaker <= 5.20 - Cross-Site Request Forgery
Slug
themebeez-toolkit
Published
2025-12-26
Title
Themebeez Toolkit <= 1.3.5 - Missing Authorization