WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
alone
Published
2025-07-14
Title
Alone – Charity Multipurpose Non-profit WordPress Theme < 7.8.7 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Slug
alone
Published
2025-07-14
Title
Alone – Charity Multipurpose Non-profit WordPress Theme < 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Slug
alone
Published
2025-07-16
Title
Alone <= 7.8.3 - Unauthenticated Remote Code Execution
Slug
alright
Published
2025-09-02
Title
Alright <= 1.6.1 - Unauthenticated Local File Inclusion
Slug
altair
Published
2025-03-18
Title
Altair < 5.2.5 - Unauthenticated Arbitrary Options Update via pp_import_current
Slug
altair
Published
2025-04-21
Title
Altair <= 5.2.2 - Unauthenticated PHP Object Injection
Slug
altair
Published
2026-08-19
Title
Altair <= 5.2.2 - Missing Authorization
Slug
althea-wp
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
alukas
Published
2026-04-22
Title
Alukas < 3.0.0 - Unauthenticated PHP Object Injection
Slug
ambience
Published
2013-06-09
Title
Ambience Theme <= 1.0 - Cross-Site Scripting (XSS)
Slug
amela
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
amela
Published
2023-07-17
Title
Multiple DeoThemes Themes - Reflected Cross-Site Scripting
Slug
amela
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
amely
Published
2025-06-23
Title
Amely < 3.2.0 - Unauthenticated SQL Injection
Slug
amfissa
Published
2026-03-10
Title
Amfissa < 1.2.1 - Unauthenticated Local File Inclusion
Slug
amoli
Published
2026-03-06
Title
Amoli < 1.1 - Unauthenticated Local File Inclusion
Slug
amoveo
Published
2014-08-01
Title
Amoveo - Arbitrary File Upload
Slug
amplus
Published
2014-08-01
Title
Amplus - CSRF
Slug
amuli
Published
2026-01-08
Title
Amuli <= 2.3.0 - Unauthenticated Local File Inclusion
Slug
amwerk
Published
2025-07-01
Title
Amwerk < 1.3.0 - Unauthenticated PHP Object Injection
Slug
anand
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
anarkali
Published
2026-01-08
Title
Anarkali <= 1.0.9 - Unauthenticated Local File Inclusion
Slug
andersonclinic
Published
2026-02-26
Title
Anderson <= 1.4.2 - Unauthenticated Local File Inclusion
Slug
andyblue
Published
2007-06-15
Title
Andyblue < 20070607 - XSS
Slug
anfaust
Published
2023-08-14
Title
Multiple Themes - Reflected XSS