WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
arkhe
Published
2025-04-11
Title
Arkhe <= 3.12.0 - Local File Inclusion via CSRF
Slug
arlo
Published
2025-06-03
Title
Arlo <= 6.0.3 - Unauthenticated Local File Inclusion
Slug
arlo
Published
2025-12-31
Title
Arlo <= 6.0.3 - Unauthenticated Stored Cross-Site Scripting
Slug
armania
Published
2026-02-11
Title
Armania <= 1.4.8 - Unauthenticated Arbitrary Shortcode Execution
Slug
aromatica
Published
2025-08-30
Title
Aromatica <= 1.8 - Unauthenticated Local File Inclusion
Slug
arrival
Published
2025-04-21
Title
Arrival <= 1.4.5 - Unauthenticated Local File Inclusion
Slug
art-theme
Published
2025-06-05
Title
Art Theme < 3.12.3 - Missing Authorization to Authenticated (Subscriber+) Theme Option Delete
Slug
artale
Published
2026-06-30
Title
Artale | Wedding Photography WordPress <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting
Slug
artificial-intelligence
Published
2015-05-12
Title
Artificial Intelligence Theme <= 1.2.3 - DOM Cross-Site Scripting (XSS)
Slug
artrium
Published
2026-02-27
Title
Artrium <= 1.0.14 - Unauthenticated Local File Inclusion
Slug
arya-multipurpose
Published
2023-04-25
Title
Arya Multipurpose <= 1.0.5 - Unauthenticated Reflected XSS
Slug
arya-multipurpose-pro
Published
2023-08-29
Title
Arya Multipurpose Pro <= 1.0.8 - Reflected XSS
Slug
ashe
Published
2024-07-01
Title
Ashe < 2.234 - Cross-Site Request Forgery to Notice Dismissal
Slug
ashe
Published
2024-11-18
Title
Ashe < 2.244 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
ashe
Published
2026-02-12
Title
Ashe < 2.268 - Missing Authorization
Slug
ashley
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion
Slug
ashtanga
Published
2026-04-20
Title
Ashtanga < 1.3 - Unauthenticated PHP Object Injection
Slug
asia-garden
Published
2026-02-27
Title
Asia Garden <= 1.3.1 - Unauthenticated Local File Inclusion
Slug
ask-me
Published
2022-10-28
Title
Ask Me < 6.8.7 - Post Deletion via CSRF
Slug
ask-me
Published
2022-05-16
Title
Ask Me < 6.8.2 - Reflected Cross-Site Scripting
Slug
ask-me
Published
2022-05-16
Title
Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions
Slug
ask-me
Published
2022-08-01
Title
Ask Me < 6.8.4 - CSRF in Edit Profile
Slug
askka
Published
2026-03-03
Title
Askka <= 1.0 - Unauthenticated Local File Inclusion
Slug
askka
Published
2026-04-08
Title
Askka - Candle Shop WordPress Theme < 1.4 - Unauthenticated PHP Object Injection
Slug
assembly
Published
2025-09-02
Title
Assembly <= 1.1 - Unauthenticated Local File Inclusion