WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
club-theme
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
coachify
Published
2024-06-28
Title
Coachify < 1.0.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
coachify
Published
2026-02-08
Title
Coachify < 1.1.6 - Missing Authorization
Slug
coachify
Published
2026-02-08
Title
Coachify < 1.1.6 - Cross-Site Request Forgery
Slug
coaching
Published
2026-07-08
Title
Coaching < 3.9.3 - Unauthenticated Stored Cross-Site Scripting
Slug
coalition
Published
2014-08-01
Title
Coalition - Unspecified XSS
Slug
cobble
Published
2026-02-11
Title
Cobble <= 1.7 - Unauthenticated Local File Inclusion
Slug
cocco
Published
2026-01-01
Title
Cocco <= 1.5.1 - Authenticated (Subscriber+) Authenticated Insecure Direct Object Reference
Slug
cocco
Published
2026-02-25
Title
Cocco - Kids Store and Baby Shop WordPress Theme < 2.0.1 - Unauthenticated Local File Inclusion
Slug
codilight
Published
2014-08-01
Title
Codilight Premium 1.0.0 - admin/front-end/options.php reset Parameter XSS
Slug
codiqa
Published
2025-10-21
Title
Codiqa < 1.2.8 - Unauthenticated PHP Object Injection
Slug
coinpress
Published
2026-03-02
Title
Coinpress <= 1.0.14 - Unauthenticated Local File Inclusion
Slug
coinpress
Published
2026-10-12
Title
Coinpress <= 1.0.15 - Unauthenticated PHP Object Injection
Slug
coldfusion
Published
2014-08-01
Title
Cold Fusion - Arbitrary File Upload
Slug
coleo
Published
2026-02-27
Title
Coleo <= 1.1.7 - Unauthenticated Local File Inclusion
Slug
colibri-wp
Published
2024-02-22
Title
Colibri WP < 1.0.101 - Cross-Site Request Forgery to Limited Plugin Installation
Slug
colibri-wp
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
college
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
colorbold
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
colorfolio
Published
2026-08-04
Title
ColorFolio - Freelance Designer WordPress <= 1.3 - Authenticated (Subscriber+) PHP Object Injection
Slug
colorit
Published
2026-10-07
Title
ColorFolio <= 1.3 - Authenticated (Subscriber+) PHP Object Injection
Slug
colormag
Published
2024-01-19
Title
ColorMag < 3.1.3 - Missing Authorization to Arbitrary Plugin Installation
Slug
colormag
Published
2024-03-21
Title
ColorMag < 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Slug
colormag
Published
2025-08-19
Title
ColorMag < 4.0.20 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Slug
colormix
Published
2014-08-01
Title
Colormix - Multiple vulnerabilities