WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
theme-builder-for-elementor
Published
2024-11-20
Title
Theme Builder For Elementor < 1.2.3 - Authenticated (Contributor+) Post Disclosure
Slug
theme-builder-for-elementor
Published
2025-07-16
Title
Theme Builder For Elementor < 1.2.4 - Cross-Site Request Forgery
Slug
theme-changer
Published
2025-04-17
Title
Theme Changer < 1.5 - Cross-Site Request Forgery
Slug
theme-demo-import
Published
2022-11-08
Title
Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload
Slug
theme-duplicator
Published
2025-04-01
Title
Theme Duplicator <= 1.1 - Cross-Site Request Forgery
Slug
theme-editor
Published
2019-09-30
Title
Theme Editor < 2.2 - Multiple Vulnerabilities
Slug
theme-editor
Published
2021-02-13
Title
Theme Editor < 2.6 - Authenticated Arbitrary File Download
Slug
theme-editor
Published
2023-11-20
Title
Theme Editor < 2.8 - Admin+ Arbitrary File Upload
Slug
theme-editor
Published
2024-08-28
Title
Theme Editor < 2.9 - Authenticated (Admin+) PHAR Deserialization
Slug
theme-editor
Published
2025-10-17
Title
Theme Editor < 3.1 - Cross-Site Request Forgery to Remote Code Execution
Slug
theme-editor
Published
2026-02-14
Title
Theme Editor <= 3.2 - Cross-Site Request Forgery
Slug
theme-file-duplicator
Published
2025-02-21
Title
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Download
Slug
theme-file-duplicator
Published
2025-02-21
Title
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
theme-importer
Published
2025-10-14
Title
Theme Importer <= 1.0 - Cross-Site Request Forgery
Slug
theme-junkie-shortcodes
Published
2024-01-03
Title
TJ Shortcodes <= 0.1.3 - Contributor+ Stored XSS via Shortcodes
Slug
theme-junkie-team-content
Published
2025-06-27
Title
Theme Junkie Team Content <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
theme-my-login
Published
2014-08-01
Title
Theme My Login 6.3.9 - Local File Inclusion
Slug
theme-my-login
Published
2024-04-15
Title
Theme My Login < 7.1.7 - Missing Authorization to Notice Dismissal
Slug
theme-my-login
Published
2024-08-15
Title
Theme My Login < 7.1.8 - Cross-Site Request Forgery to Settings Update
Slug
theme-my-login
Published
2025-09-26
Title
Theme My Login < 7.1.13 - Missing Authorization
Slug
theme-my-ontraport-smartform
Published
2025-01-16
Title
Theme My Ontraport Smartform <= 1.2.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
theme-options-z
Published
2025-02-03
Title
Theme Options Z <= 1.4 - Cross-Site Request Forgery
Slug
theme-per-user
Published
2023-12-29
Title
Theme per user < 1.0.2 - Unauthenticated PHP Object Injection
Slug
theme-switcha
Published
2023-10-16
Title
Theme Switcha < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
theme-switcha
Published
2025-04-22
Title
Theme Switcha < 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting