WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
a-mart
Published
2026-02-17
Title
A-Mart <= 1.0.2 - Unauthenticated Local File Inclusion
Slug
aalto
Published
2026-07-02
Title
Aalto <= 1.8 - Authenticated (Contributor+) Local File Inclusion
Slug
aapna
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
aardvark
Published
2026-01-27
Title
Aardvark <= 4.6.3 - Reflected Cross-Site Scripting
Slug
abelle
Published
2026-05-26
Title
Abelle <= 1.22 - Unauthenticated Local File Inclusion
Slug
abelle
Published
2026-08-06
Title
Abelle <= 1.22 - Unauthenticated PHP Object Injection
Slug
abogado
Published
2026-08-06
Title
Abogado - Lawyer WordPress Theme <= 1.18 - Unauthenticated PHP Object Injection
Slug
abundance
Published
2014-08-01
Title
Abundance - Unspecified XSS
Slug
academist
Published
2025-10-16
Title
Academist < 1.3 - Unauthenticated Local File Inclusion
Slug
accalia
Published
2026-08-06
Title
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor <= 1.5.3 - Unauthenticated PHP Object Injection
Slug
accelerate
Published
2026-08-05
Title
Accelerate < 1.5.4 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Slug
accessbuddy
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-basic
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-mag
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-parallax
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-ray
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-root
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-staple
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accesspress-staple
Published
2024-11-20
Title
Multiple Themes - Authenticated (Subscriber+) Arbitrary Plugin Activation and Deactivation
Slug
accesspress-store
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
accio
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
accountra
Published
2024-04-26
Title
Multiple Themes by jegstudio - Multiple Versions - Missing Authorization to Notice Dismissal
Slug
acerola
Published
2025-05-22
Title
Mulitple Themes by Themeton <= (Various Versions) - Unauthenticated PHP Object Injection
Slug
acerola
Published
2025-05-16
Title
Acerola <= 1.6.5 - Missing Authorization