WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
adforest
Published
2025-01-21
Title
AdForest < 5.1.9 - Authentication Bypass
Slug
adforest
Published
2025-09-05
Title
AdForest < 6.0.10 - Authentication Bypass
Slug
adforest
Published
2025-12-04
Title
AdForest < 6.0.12 - Missing Authorization
Slug
adforest
Published
2026-01-20
Title
AdForest < 6.0.12 - Unauthenticated Local File Inclusion
Slug
adforest
Published
2026-02-11
Title
AdForest < 6.0.13 - Authentication Bypass
Slug
adifier
Published
2023-11-29
Title
Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting
Slug
adifier-system
Published
2023-12-04
Title
Adifier System < 3.1.4 - Unauthenticated SQL Injection
Slug
adifier-system
Published
2023-12-04
Title
Adifier System < 3.1.4 - Unauthenticated Local File Inclusion
Slug
adventure-journal
Published
2024-04-29
Title
Adventure Journal <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aeroland
Published
2026-01-07
Title
AeroLand <= 1.6.6 - Unauthenticated Local File Inclusion
Slug
affluent
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
agency-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
agncy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
agricola
Published
2025-08-19
Title
Agricola <= 1.1.0 - Unauthenticated Local File Inclusion
Slug
agritourismo-theme
Published
2014-08-01
Title
Agritourismo - Remote File Upload
Slug
agrofood
Published
2026-03-03
Title
Agrofood < 1.4.0 - Reflected Cross-Site Scripting
Slug
aidreform
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
aihub
Published
2025-04-18
Title
AIHub < 1.3.8 - Unauthenticated Arbitrary File Upload in generate_image
Slug
aihub
Published
2025-04-10
Title
AI Hub - Startup & Technology WordPress Theme < 1.3.8 - Unauthenticated Arbitrary File Upload
Slug
aihub
Published
2025-08-27
Title
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Slug
airin-blog
Published
2024-11-13
Title
Airin Blog < 1.6.3 - Unauthenticated PHP Object Injection
Slug
akal
Published
2016-08-22
Title
Akal Theme - Reflected Cross-Site Scripting (XSS)
Slug
alchemists
Published
2026-02-25
Title
Alchemists <= 4.6.0 - Unauthenticated Local File Inclusion
Slug
aldo
Published
2026-03-02
Title
Aldo <= 1.0.10 - Unauthenticated Local File Inclusion
Slug
algenix
Published
2025-09-02
Title
Algenix <= 1.0 - Unauthenticated Local File Inclusion