WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
dt-the7
Published
2025-10-05
Title
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dt-the7
Published
2026-05-14
Title
The7 < 14.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter
Slug
dukamarket
Published
2026-02-12
Title
DukaMarket <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
dwell
Published
2025-08-19
Title
Dwell <= 1.7.0 - Unauthenticated Local File Inclusion
Slug
dwt-listing
Published
2025-01-15
Title
DWT - Directory & Listing WordPress Theme < 3.3.4 - Reflected Cross-Site Scripting
Slug
dwt-listing
Published
2025-02-08
Title
DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dwt-listing
Published
2025-06-26
Title
DWT < 3.3.7 - Unauthenticated Arbitrary User Password Reset
Slug
dzonia-lite
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure