WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
blocksy
Published
2024-03-08
Title
Blocksy < 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2024-04-24
Title
Blocksy < 2.0.40 - Contributor+ Stored Cross-Site Scripting
Slug
blocksy
Published
2024-04-23
Title
Blocksy < 2.0.34 - Contributor+ Stored XSS
Slug
blocksy
Published
2024-05-03
Title
Blocksy < 2.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2024-05-20
Title
Blocksy < 2.0.47 - Contributor+ Stored XSS
Slug
blocksy
Published
2024-06-04
Title
Blocksy < 2.0.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2024-12-04
Title
Blocksy < 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2025-05-07
Title
Blocksy < 2.0.98 - Missing Authorization
Slug
blocksy
Published
2025-08-14
Title
Blocksy < 2.1.7 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
blocksy
Published
2026-03-02
Title
Blocksy < 2.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields
Slug
blogbyte
Published
2025-06-25
Title
Blogbyte < 1.1.2 - Unauthenticated Local File Inclusion
Slug
bloger
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
blogger-buzz
Published
2025-07-30
Title
Blogger Buzz < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bloggie
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload
Slug
bloggie
Published
2025-05-19
Title
Bloggie <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
Slug
bloghub
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blogistic
Published
2026-01-13
Title
Blogistic <= 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
bloglo
Published
2024-06-06
Title
Bloglo < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blogmarks
Published
2025-08-21
Title
BlogMarks <= 1.0.8 - Unauthenticated Local File Inclusion
Slug
blogmatic
Published
2025-10-15
Title
Blogmatic < 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
blogmine
Published
2025-06-25
Title
Blogmine < 1.1.8 - Unauthenticated Local File Inclusion
Slug
blogpoet
Published
2024-08-29
Title
Blogpoet < 1.0.3 - Missing Authorization via blogpoet_install_and_activate_plugins()
Slug
blogprise
Published
2025-06-25
Title
Blogprise < 1.0.10 - Unauthenticated Local File Inclusion
Slug
blogty
Published
2025-06-25
Title
Blogty < 1.0.12 - Unauthenticated Local File Inclusion
Slug
blogvy
Published
2025-06-25
Title
Blogvy < 1.0.8 - Unauthenticated Local File Inclusion