WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
backpacktraveler
Published
2025-05-21
Title
Backpack Traveler <= 2.7 - Unauthenticated Local File Inclusion
Slug
bacola
Published
2023-12-07
Title
Multiple Themes by KlbTheme - Cross-Site Request Forgery
Slug
bakes-and-cakes
Published
2024-07-04
Title
themedropbox Themes <= Various Versions - Missing Authorization to Notice Dismissal
Slug
balkon
Published
2023-06-23
Title
Balkon < 1.3.3 - Reflected Cross-Site Scripting
Slug
bani
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bani
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
bani
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bard
Published
2024-07-04
Title
Bard < 2.211 - Cross-Site Request Forgery to Notice Dismissal
Slug
bard
Published
2024-11-18
Title
Bard < 2.217 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
bardwp
Published
2025-10-21
Title
Bard < 1.7 - Cross-Site Request Forgery
Slug
barter
Published
2024-12-19
Title
Barter < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
basel
Published
2025-11-19
Title
Basel < 5.9.2 - Missing Authorization
Slug
basil
Published
2024-06-14
Title
Basil < 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
baton
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bazaar-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
bbe
Published
2018-05-10
Title
BBE Theme < 1.53 - Direct Object Reference
Slug
beach_apollo
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
beach_apollo
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
beauty
Published
2024-09-12
Title
Beauty <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via tpl_featured_cat_id Parameter
Slug
beauty-premium
Published
2016-03-11
Title
Beauty & Clean Theme 1.0.8 - Arbitrary File Upload
Slug
bellevuex
Published
2025-04-22
Title
Hotel + Bed and Breakfast Booking Calendar Theme | Bellevue <= 4.2.2 - Missing Authorization
Slug
bello
Published
2021-05-16
Title
Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS
Slug
bello
Published
2021-05-16
Title
Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS
Slug
bello
Published
2021-05-16
Title
Bello < 1.6.0 - Unauthenticated Blind SQL Injection
Slug
benevolent
Published
2024-06-28
Title
Benevolent < 1.3.5 - Cross-Site Request Forgery to Notice Dismissal