WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
careplus
Published
2020-07-27
Title
CarePlus <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
cars4rent
Published
2025-08-26
Title
Cars4Rent <= 1.4.2 - Unauthenticated PHP Object Injection
Slug
carspot
Published
2019-04-18
Title
CarSpot Theme <= 2.1.6 - Authenticated Stored XSS
Slug
carspot
Published
2020-01-27
Title
CarSpot < 2.2.3 - Multiple Vulnerabilities
Slug
carspot
Published
2025-02-17
Title
CarSpot < 2.4.4 - Unauthenticated Arbitrary Password Reset/Account Takeover
Slug
carspot
Published
2026-01-20
Title
CarSpot < 2.4.6 - Reflected Cross-Site Scripting
Slug
cartify
Published
2026-02-09
Title
Cartify - WooCommerce Gutenberg WordPress <= 1.3 - Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
cartify-multipurpose-woocommerce-wordpress-theme
Published
2026-08-10
Title
Cartify <= 1.3.0.1 - Missing Authorization
Slug
carzine
Published
2025-01-18
Title
CarZine <= 1.4.6 - Reflected Cross-Site Scripting
Slug
carzone
Published
2026-03-03
Title
Car Zone <= 3.7 - Authenticated (Subscriber+) PHP Object Injection
Slug
carzone
Published
2026-05-26
Title
CarZone - A Complete Car Dealer HTML Wire-Frame <= 3.7 - Unauthenticated Arbitrary File Deletion
Slug
cas
Published
2024-05-02
Title
CAS <= 1.0.0 - Unauthenticated Arbitrary File Access
Slug
cas
Published
2024-05-02
Title
CAS <= 1.0.0 - Unauthenticated SSRF
Slug
casamia
Published
2026-03-04
Title
CasaMia | Property Rental Real Estate WordPress Theme <= 1.1.2 - Unauthenticated Local File Inclusion
Slug
catamaran
Published
2025-08-22
Title
Catamaran <= 1.15 - Unauthenticated Local File Inclusion
Slug
catch-base
Published
2024-09-25
Title
Catch Base < 3.4.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
catwalk
Published
2025-09-02
Title
Catwalk <= 1.4 - Unauthenticated Local File Inclusion
Slug
caulk
Published
2014-08-01
Title
Caulk - path disclosure
Slug
celeste
Published
2026-02-24
Title
Celeste <= 1.3.6 - Unauthenticated PHP Object Injection
Slug
celestial-aura
Published
2025-04-14
Title
Celestial Aura <= 2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
cena
Published
2025-07-23
Title
Cena Store < 2.11.27 - Unauthenticated Local File Inclusion
Slug
cerato
Published
2025-09-16
Title
Cerato <= 2.2.18 - Reflected Cross-Site Scripting
Slug
cerebrum
Published
2025-08-22
Title
Cerebrum <= 1.12 - Unauthenticated Local File Inclusion
Slug
chained
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chameleon
Published
2013-11-02
Title
Chameleon - Arbitrary File Upload