WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
charity-zone
Published
2026-04-20
Title
Charity Zone < 1.1.2 - Subscriber+ Arbitrary File Upload
Slug
chateau
Published
2026-04-20
Title
Château < 1.3 - Unauthenticated PHP Object Injection
Slug
chic-lifestyle
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chic-lite
Published
2024-06-20
Title
Chic Lite < 1.1.4 - Cross-Site Request Forgery to Notice Dismissal
Slug
childhope
Published
2025-09-04
Title
ChildHope <= 1.1.8 - Unauthenticated Local File Inclusion
Slug
chinchilla
Published
2025-08-23
Title
Chinchilla <= 1.16 - Unauthenticated Local File Inclusion
Slug
chocolate-house
Published
2026-02-13
Title
Chocolate House < 1.1.6 - Missing Authorization
Slug
choices
Published
2014-08-01
Title
Choices - Unspecified XSS
Slug
christine-miller
Published
2026-02-27
Title
Miller <= 1.3.3 - Unauthenticated Local File Inclusion
Slug
chroma
Published
2026-03-02
Title
Chroma <= 1.11 - Unauthenticated Local File Inclusion
Slug
chronicle
Published
2026-02-25
Title
Chronicle <= 1.0 - Unauthenticated Local File Inclusion
Slug
churchope
Published
2014-12-07
Title
ChurcHope Theme <= 2.1 - Local File Inclusion (LFI)
Slug
churel
Published
2025-03-28
Title
Churel <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cinerama
Published
2025-12-20
Title
Cinerama - A WordPress Theme for Movie Studios and Filmmakers <= 2.4 - Authenticated (Contributor+) Local File Inclusion
Slug
city-store
Published
2025-03-24
Title
City Store <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
citybook
Published
2020-01-09
Title
CityBook < 2.3.4 - Multiple Vulnerabilities
Slug
citybook
Published
2020-06-19
Title
CityBook < 2.4.4 - Unauthenticated Reflected XSS
Slug
citygov
Published
2025-06-25
Title
CityGov <= 1.9 - Unauthenticated Local File Inclusion
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Authentication Bypass via Password Update
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Sensitive Information Exposure
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Authentication Bypass via Non-Randomized Password for SSO Accounts
Slug
ciyashop
Published
2025-03-13
Title
CiyaShop - Multipurpose WooCommerce Theme < 4.19.1 - Unauthenticated PHP Object Injection
Slug
ciyashop
Published
2025-04-21
Title
CiyaShop <= 4.18.0 - Unauthenticated PHP Object Injection
Slug
clanora
Published
2025-09-01
Title
Clanora < 1.3.1 - Unauthenticated Arbitrary File Upload
Slug
classic
Published
2014-08-01
Title
Classic 1.5 - PHP_SELF XSS