WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
theme-file-duplicator
Published
2025-02-21
Title
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
theme-importer
Published
2025-10-14
Title
Theme Importer <= 1.0 - Cross-Site Request Forgery
Slug
theme-junkie-shortcodes
Published
2024-01-03
Title
TJ Shortcodes <= 0.1.3 - Contributor+ Stored XSS via Shortcodes
Slug
theme-junkie-team-content
Published
2025-06-27
Title
Theme Junkie Team Content <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
theme-my-login
Published
2014-08-01
Title
Theme My Login 6.3.9 - Local File Inclusion
Slug
theme-my-login
Published
2024-04-15
Title
Theme My Login < 7.1.7 - Missing Authorization to Notice Dismissal
Slug
theme-my-login
Published
2024-08-15
Title
Theme My Login < 7.1.8 - Cross-Site Request Forgery to Settings Update
Slug
theme-my-login
Published
2025-09-26
Title
Theme My Login < 7.1.13 - Missing Authorization
Slug
theme-my-login
Published
2026-08-06
Title
Theme My Login < 7.1.15 - Cross-Site Request Forgery
Slug
theme-my-login
Published
2026-08-31
Title
Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation
Slug
theme-my-login
Published
2026-09-04
Title
Theme My Login < 7.2.0 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage
Slug
theme-my-ontraport-smartform
Published
2025-01-16
Title
Theme My Ontraport Smartform <= 1.2.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
theme-options-z
Published
2025-02-03
Title
Theme Options Z <= 1.4 - Cross-Site Request Forgery
Slug
theme-per-user
Published
2023-12-29
Title
Theme per user < 1.0.2 - Unauthenticated PHP Object Injection
Slug
theme-switcha
Published
2023-10-16
Title
Theme Switcha < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
theme-switcha
Published
2025-04-22
Title
Theme Switcha < 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
theme-switcher-reloaded
Published
2025-08-25
Title
Theme Switcher Reloaded <= 1.1 - Reflected Cross-Site Scripting
Slug
theme-test-drive
Published
2015-11-23
Title
Theme Test Drive <= 2.9 - Authenticated File Upload & XSS
Slug
theme-test-drive
Published
2026-08-14
Title
Theme Test Drive <= 2.9.1 - Unauthenticated Local File Inclusion
Slug
theme-tuner
Published
2012-01-23
Title
Theme Tuner < 0.8 - Remote File Inclusion
Slug
theme-tweaker-lite
Published
2023-02-20
Title
Theme Tweaker <= 5.20 - Cross-Site Request Forgery
Slug
themebeez-toolkit
Published
2025-12-26
Title
Themebeez Toolkit < 1.3.7 - Missing Authorization
Slug
themedy-toolbox
Published
2024-09-26
Title
Themedy Toolbox < 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
themedy-toolbox
Published
2024-10-31
Title
Themedy Toolbox <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themeegg-toolkit
Published
2025-03-11
Title
ThemeEgg ToolKit <= 1.2.9 - Authenticated (Administrator+) Arbitrary File Upload