WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
theatre
Published
2025-11-13
Title
Theater for WordPress < 0.19 - Missing Authorization
Slug
theatre
Published
2025-12-28
Title
Theater for WordPress < 0.19.1 - Missing Authorization
Slug
thebing-snippet
Published
2025-09-12
Title
Fidelo Snippet <= 1.12 - Reflected Cross-Site Scripting
Slug
thebooking
Published
2025-07-30
Title
TheBooking <= 1.4.4 - Missing Authorization
Slug
thecartpress
Published
2011-12-31
Title
TheCartPress < 1.1.6 - Cross-Site Scripting (XSS)
Slug
thecartpress
Published
2014-08-01
Title
TheCartPress 1.1.1 - Remote File Inclusion
Slug
thecartpress
Published
2015-04-29
Title
TheCartPress < 1.3.9.3 - Multiple Vulnerabilities
Slug
thecartpress
Published
2021-10-05
Title
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Unauthenticated Arbitrary Admin Account Creation
Slug
thegem-elements
Published
2025-10-16
Title
TheGem Theme Elements (for WPBakery) < 5.10.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements
Published
2025-10-13
Title
TheGem Theme Elements (for WPBakery) < 5.10.5.2 - Unauthenticated Local File Inclusion
Slug
thegem-elements
Published
2026-01-10
Title
TheGem Theme Elements (for WPBakery) < 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2025-10-12
Title
TheGem Theme Elements (for Elementor) < 5.10.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2025-10-12
Title
TheGem Theme Elements (for Elementor) < 5.10.5.2 - Authenticated (Contributor+) Local File Inclusion
Slug
thegem-elements-elementor
Published
2026-01-10
Title
TheGem Theme Elements (for Elementor) < 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2026-01-10
Title
TheGem Theme Elements (for Elementor) < 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Slug
thegem-importer
Published
2025-10-13
Title
TheGem Demo Import (for WPBakery) < 5.10.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
themarketer
Published
2025-05-07
Title
theMarketer < 1.4.8 - Stored XSS via CSRF
Slug
theme-blvd-responsive-google-maps
Published
2023-01-19
Title
Theme Blvd Responsive Google Maps <= 1.0.2 - Contributor+ XSS
Slug
theme-blvd-shortcodes
Published
2023-10-22
Title
Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
theme-blvd-sliders
Published
2025-05-02
Title
Theme Blvd Sliders <= 1.2.5 - Reflected Cross-Site Scripting
Slug
theme-blvd-widget-areas
Published
2025-08-26
Title
Theme Blvd Widget Areas <= 1.3.0 - Reflected Cross-Site Scripting
Slug
theme-builder-for-elementor
Published
2024-11-20
Title
Theme Builder For Elementor < 1.2.3 - Authenticated (Contributor+) Post Disclosure
Slug
theme-builder-for-elementor
Published
2025-07-16
Title
Theme Builder For Elementor < 1.2.4 - Cross-Site Request Forgery
Slug
theme-changer
Published
2025-04-17
Title
Theme Changer < 1.5 - Cross-Site Request Forgery
Slug
theme-demo-import
Published
2022-11-08
Title
Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload