WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
thegem-elements-elementor
Published
2026-01-10
Title
TheGem Theme Elements (for Elementor) < 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2026-01-10
Title
TheGem Theme Elements (for Elementor) < 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Slug
thegem-elements-elementor
Published
2026-04-27
Title
TheGem Theme Elements < 5.12.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2026-07-02
Title
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Slug
thegem-importer
Published
2025-10-13
Title
TheGem Demo Import (for WPBakery) < 5.10.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
thegov-core
Published
2026-04-07
Title
Thegov Core < 2.0.23 - Unauthenticated Local File Inclusion
Slug
themarketer
Published
2025-05-07
Title
theMarketer < 1.4.8 - Stored XSS via CSRF
Slug
theme-blvd-responsive-google-maps
Published
2023-01-19
Title
Theme Blvd Responsive Google Maps <= 1.0.2 - Contributor+ XSS
Slug
theme-blvd-shortcodes
Published
2023-10-22
Title
Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
theme-blvd-sliders
Published
2025-05-02
Title
Theme Blvd Sliders <= 1.2.5 - Reflected Cross-Site Scripting
Slug
theme-blvd-widget-areas
Published
2025-08-26
Title
Theme Blvd Widget Areas <= 1.3.0 - Reflected Cross-Site Scripting
Slug
theme-builder-for-elementor
Published
2024-11-20
Title
Theme Builder For Elementor < 1.2.3 - Authenticated (Contributor+) Post Disclosure
Slug
theme-builder-for-elementor
Published
2025-07-16
Title
Theme Builder For Elementor < 1.2.4 - Cross-Site Request Forgery
Slug
theme-changer
Published
2025-04-17
Title
Theme Changer < 1.5 - Cross-Site Request Forgery
Slug
theme-demo-import
Published
2022-11-08
Title
Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload
Slug
theme-demo-import
Published
2026-07-17
Title
Theme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload
Slug
theme-duplicator
Published
2025-04-01
Title
Theme Duplicator <= 1.1 - Cross-Site Request Forgery
Slug
theme-editor
Published
2019-09-30
Title
Theme Editor < 2.2 - Multiple Vulnerabilities
Slug
theme-editor
Published
2021-02-13
Title
Theme Editor < 2.6 - Authenticated Arbitrary File Download
Slug
theme-editor
Published
2023-11-20
Title
Theme Editor < 2.8 - Admin+ Arbitrary File Upload
Slug
theme-editor
Published
2024-08-28
Title
Theme Editor < 2.9 - Authenticated (Admin+) PHAR Deserialization
Slug
theme-editor
Published
2025-10-17
Title
Theme Editor < 3.1 - Cross-Site Request Forgery to Remote Code Execution
Slug
theme-editor
Published
2026-02-14
Title
Theme Editor <= 3.2 - Cross-Site Request Forgery
Slug
theme-editor
Published
2026-07-31
Title
Theme Editor < 3.2 - Cross-Site Request Forgery to CSS Modification
Slug
theme-file-duplicator
Published
2025-02-21
Title
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Download