WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
agritourismo-theme
Published
2014-08-01
Title
Agritourismo - Remote File Upload
Slug
agrofood
Published
2026-03-03
Title
Agrofood < 1.4.0 - Reflected Cross-Site Scripting
Slug
aidreform
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
aihub
Published
2025-04-18
Title
AIHub < 1.3.8 - Unauthenticated Arbitrary File Upload in generate_image
Slug
aihub
Published
2025-04-10
Title
AI Hub - Startup & Technology WordPress Theme < 1.3.8 - Unauthenticated Arbitrary File Upload
Slug
aihub
Published
2025-08-27
Title
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Slug
aihub
Published
2026-08-06
Title
AI Hub - Startup & Technology WordPress Theme <= 1.3.10 - Authenticated (Subscriber+) Arbitrary File Dowload
Slug
ailab
Published
2026-04-27
Title
AI Lab < 5.4.2 - Unauthenticated PHP Object Injection
Slug
air-supply
Published
2026-05-26
Title
AirSupply <= 2.0.0 - Unauthenticated Local File Inclusion
Slug
airin-blog
Published
2024-11-13
Title
Airin Blog < 1.6.3 - Unauthenticated PHP Object Injection
Slug
airtifact
Published
2026-01-01
Title
Airtifact <= 1.2.91 - Authenticated (Contributor+) Local File Inclusion
Slug
akal
Published
2016-08-22
Title
Akal Theme - Reflected Cross-Site Scripting (XSS)
Slug
alchemists
Published
2026-02-25
Title
Alchemists <= 4.6.0 - Unauthenticated Local File Inclusion
Slug
aldo
Published
2026-03-02
Title
Aldo <= 1.0.10 - Unauthenticated Local File Inclusion
Slug
algenix
Published
2025-09-02
Title
Algenix <= 1.0 - Unauthenticated Local File Inclusion
Slug
allegiant
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
allegiant
Published
2024-08-16
Title
Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
alliance
Published
2026-02-23
Title
Alliance <= 3.1.1 - Unauthenticated Local File Inclusion
Slug
alloggio
Published
2025-03-30
Title
Alloggio - Hotel Booking <= 1.8 - Unauthenticated Local File Inclusion
Slug
alloggio
Published
2026-04-08
Title
Alloggio - Hotel Booking WordPress Theme < 2.1.3 - Unauthenticated PHP Object Injection
Slug
alltuts
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
allure-real-estate-theme-for-placester
Published
2014-08-01
Title
allure-real-estate-theme-for-placester <= 0.1.1 - XSS in ZeroClipboard.swf
Slug
allure-real-estate-theme-for-real-estate
Published
2014-08-01
Title
allure-real-estate-theme-for-real-estate <= 0.1.1 - XSS in ZeroClipboard.swf
Slug
almera
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
alone
Published
2025-07-01
Title
Alone < 7.8.5 - Unauthenticated Remote Code Execution