WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
busiprof
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
busiprof
Published
2024-08-12
Title
Busiprof <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
butcher
Published
2025-05-21
Title
Butcher <= 2.40 - Unauthenticated Local File Inclusion
Slug
butcher
Published
2025-05-22
Title
Butcher < 2.54 - Reflected Cross-Site Scripting
Slug
butterbelly
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
buyent
Published
2026-02-18
Title
Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration
Slug
buzzclub
Published
2025-01-17
Title
Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme < 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update
Slug
buzzstone
Published
2026-02-25
Title
Buzz Stone | Magazine & Viral Blog WordPress <= 1.0.2 - Unauthenticated Local File Inclusion
Slug
bw-craftxtore
Published
2025-06-09
Title
CraftXtore <= 1.7 - Unauthenticated Local File Inclusion
Slug
bw-fitrush
Published
2025-06-09
Title
Fitrush <= 1.3.4 - Unauthenticated Local File Inclusion
Slug
bw-giftxtore
Published
2025-06-09
Title
GiftXtore < 1.7.6 - Unauthenticated Local File Inclusion
Slug
bw-petito
Published
2025-06-09
Title
Petito < 1.6.5 - Unauthenticated Local File Inclusion
Slug
bw-printxtore
Published
2025-06-25
Title
PrintXtore < 1.7.7 - Unauthenticated Local File Inclusion
Slug
bw-zagg
Published
2025-06-13
Title
Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
Slug
bw-zenny
Published
2025-06-23
Title
Zenny <= 1.7.5 - Unauthenticated Local File Inclusion