WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
brand
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
brand
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
brandy
Published
2024-12-11
Title
Brand < 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
brasserie
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bravada
Published
2024-08-16
Title
Bravada < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bretheon
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
bretheon
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
bricks
Published
2022-10-03
Title
Bricks Builder < 1.5.4 - Subscriber+ Arbitrary Post/Page Edition
Slug
bricks
Published
2022-10-03
Title
Bricks Builder < 1.5.4 - Subscriber+ Remote Code Execution
Slug
bricks
Published
2024-02-14
Title
Bricks < 1.9.6.1 - Unauthenticated Remote Code Execution
Slug
bricks
Published
2024-02-13
Title
Bricks < 1.9.6.1 - Unauthenticated Remote Code Execution
Slug
bricks
Published
2024-08-16
Title
Bricks < 1.8.2 - Cross-Site Request Forgery via reset_settings
Slug
bricks
Published
2024-08-16
Title
Bricks < 1.8.2 - Cross-Site Request Forgery via save_settings
Slug
bricks
Published
2024-09-13
Title
Bricks < 1.10.2 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting
Slug
bricks
Published
2025-02-26
Title
Bricksbuilder < 1.9.7 - Authenticated (Contributor+) Privilege Escalation via create_autosave
Slug
bricks
Published
2025-07-28
Title
Bricks Builder < 2.0 - Unauthenticated SQL Injection via `p` Parameter
Slug
bricks
Published
2025-07-28
Title
Bricks Builder < 2.0 - Unauthenticated SQL Injection via `p` Parameter
Slug
bridge
Published
2017-08-08
Title
Bridge Theme <= 11.1 - DOM Cross-Site Scripting (XSS)
Slug
bridge
Published
2019-10-21
Title
Bridge Theme < 18.2.1 - Open Redirect
Slug
brightbox
Published
2014-08-01
Title
Brightbox - Unspecified XSS
Slug
brilliance
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
brilliance
Published
2023-03-13
Title
Brilliance <= 1.3.1 - Subscriber+ Stored XSS
Slug
brisk
Published
2014-08-01
Title
Brisk - Unspecified XSS
Slug
brite
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
broadcast-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius