WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
dt-the7
Published
2025-08-09
Title
The7 < 12.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes
Slug
dt-the7
Published
2025-10-24
Title
The7 — Ultimate WordPress & WooCommerce Theme < 12.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css'
Slug
dt-the7
Published
2025-10-04
Title
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
dt-the7
Published
2025-10-05
Title
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dt-the7
Published
2026-05-14
Title
The7 < 14.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter
Slug
dt-the7
Published
2026-10-05
Title
The7 — Website and eCommerce Builder for WordPress <= 14.2.2 - Missing Authorization
Slug
dukamarket
Published
2026-02-12
Title
DukaMarket <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
dukamarket
Published
2026-10-07
Title
Duka Market - Multipurpose eCommerce Template <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
dwell
Published
2025-08-19
Title
Dwell <= 1.7.0 - Unauthenticated Local File Inclusion
Slug
dwell
Published
2026-10-08
Title
Dwell - Building, Construction & Renovation Theme <= 1.16.0 - Unauthenticated PHP Object Injection
Slug
dwt-listing
Published
2025-01-15
Title
DWT - Directory & Listing WordPress Theme < 3.3.4 - Reflected Cross-Site Scripting
Slug
dwt-listing
Published
2025-02-08
Title
DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dwt-listing
Published
2025-06-26
Title
DWT < 3.3.7 - Unauthenticated Arbitrary User Password Reset
Slug
dzonia-lite
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure