WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
dt-the7
Published
2023-04-06
Title
The7 < 11.6.1 - Reflected XSS
Slug
dt-the7
Published
2024-06-24
Title
The7 — Website and eCommerce Builder for WordPress < 11.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Slug
dt-the7
Published
2025-08-09
Title
The7 < 12.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes
Slug
dt-the7
Published
2025-10-24
Title
The7 — Ultimate WordPress & WooCommerce Theme < 12.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css'
Slug
dt-the7
Published
2025-10-04
Title
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
dt-the7
Published
2025-10-05
Title
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dwell
Published
2025-08-19
Title
Dwell <= 1.7.0 - Unauthenticated Local File Inclusion
Slug
dwt-listing
Published
2025-01-15
Title
DWT - Directory & Listing WordPress Theme < 3.3.4 - Reflected Cross-Site Scripting
Slug
dwt-listing
Published
2025-02-08
Title
DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dwt-listing
Published
2025-06-26
Title
DWT < 3.3.7 - Unauthenticated Arbitrary User Password Reset
Slug
dzonia-lite
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure