WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
theatre
Published
2025-09-22
Title
Theater for WordPress < 0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
theatre
Published
2025-11-13
Title
Theater for WordPress < 0.19 - Missing Authorization
Slug
theatre
Published
2025-12-28
Title
Theater for WordPress < 0.19.1 - Missing Authorization
Slug
theatre
Published
2026-02-25
Title
Theater for WordPress < 0.19.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
thebing-snippet
Published
2025-09-12
Title
Fidelo Snippet <= 1.12 - Reflected Cross-Site Scripting
Slug
thebooking
Published
2025-07-30
Title
TheBooking <= 1.4.4 - Missing Authorization
Slug
thecartpress
Published
2011-12-31
Title
TheCartPress < 1.1.6 - Cross-Site Scripting (XSS)
Slug
thecartpress
Published
2014-08-01
Title
TheCartPress 1.1.1 - Remote File Inclusion
Slug
thecartpress
Published
2015-04-29
Title
TheCartPress < 1.3.9.3 - Multiple Vulnerabilities
Slug
thecartpress
Published
2021-10-05
Title
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Unauthenticated Arbitrary Admin Account Creation
Slug
thegem-elements
Published
2025-10-16
Title
TheGem Theme Elements (for WPBakery) < 5.10.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements
Published
2025-10-13
Title
TheGem Theme Elements (for WPBakery) < 5.10.5.2 - Unauthenticated Local File Inclusion
Slug
thegem-elements
Published
2026-01-10
Title
TheGem Theme Elements (for WPBakery) < 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2025-10-12
Title
TheGem Theme Elements (for Elementor) < 5.10.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2025-10-12
Title
TheGem Theme Elements (for Elementor) < 5.10.5.2 - Authenticated (Contributor+) Local File Inclusion
Slug
thegem-elements-elementor
Published
2026-01-10
Title
TheGem Theme Elements (for Elementor) < 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elements-elementor
Published
2026-01-10
Title
TheGem Theme Elements (for Elementor) < 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Slug
thegem-elements-elementor
Published
2026-04-27
Title
TheGem Theme Elements < 5.12.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-importer
Published
2025-10-13
Title
TheGem Demo Import (for WPBakery) < 5.10.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
thegov-core
Published
2026-04-07
Title
Thegov Core < 2.0.23 - Unauthenticated Local File Inclusion
Slug
themarketer
Published
2025-05-07
Title
theMarketer < 1.4.8 - Stored XSS via CSRF
Slug
theme-blvd-responsive-google-maps
Published
2023-01-19
Title
Theme Blvd Responsive Google Maps <= 1.0.2 - Contributor+ XSS
Slug
theme-blvd-shortcodes
Published
2023-10-22
Title
Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
theme-blvd-sliders
Published
2025-05-02
Title
Theme Blvd Sliders <= 1.2.5 - Reflected Cross-Site Scripting
Slug
theme-blvd-widget-areas
Published
2025-08-26
Title
Theme Blvd Widget Areas <= 1.3.0 - Reflected Cross-Site Scripting