WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
f8-lite
Published
2011-09-27
Title
F8 Lite < 4.2.2 - XSS
Slug
fabric
Published
2025-08-19
Title
Fabric <= 1.5.0 - Unauthenticated Local File Inclusion
Slug
fabrica
Published
2025-08-19
Title
Fabrica <= 1.8.1 - Unauthenticated Local File Inclusion
Slug
faith-hope
Published
2025-09-04
Title
Faith & Hope <= 2.13.0 - Unauthenticated Local File Inclusion
Slug
famita
Published
2025-08-30
Title
Famita < 1.55.1 - Unauthenticated Local File Inclusion
Slug
famous
Published
2014-08-01
Title
Famous 2.0.5 - Shell Upload
Slug
fana
Published
2025-06-11
Title
Fana < 1.1.29 - Unauthenticated Local File Inclusion
Slug
fana
Published
2025-12-28
Title
Fana < 1.1.36 - Authenticated (Contributor+) Local File Inclusion
Slug
fana
Published
2026-02-11
Title
Fana < 1.1.36 - Unauthenticated Local File Inclusion
Slug
farmagrico
Published
2025-09-04
Title
Farm Agrico <= 1.3.11 - Unauthenticated Local File Inclusion
Slug
fashion2
Published
2025-12-15
Title
Fashion < 5.3.0 - Authenticated (Contributor+) Local File Inclusion
Slug
fashionable-store
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
fashstore
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
feather12
Published
2014-08-01
Title
Feather12 - Multiple Script Direct Request Path Disclosure
Slug
feedy
Published
2026-03-20
Title
Feedy < 2.1.5 - Unauthenticated Local File Inclusion
Slug
felan-framework
Published
2025-10-15
Title
Felan Framework < 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions
Slug
felan-framework
Published
2025-10-15
Title
Felan Framework < 1.1.5 - Hardcoded Credentials
Slug
felici
Published
2014-08-01
Title
felici - XSS
Slug
felici
Published
2014-08-01
Title
felici - Custom Background Shell Upload
Slug
felizia
Published
2026-03-04
Title
Felizia | Fertility Center & Medical WordPress Theme <= 1.3.4 - Unauthenticated Local File Inclusion
Slug
femme
Published
2025-09-04
Title
Femme <= 1.3.11 - Unauthenticated Local File Inclusion
Slug
festy
Published
2025-08-23
Title
Festy <= 1.13.0 - Unauthenticated Local File Inclusion
Slug
fifteen
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
filmax
Published
2026-02-27
Title
Filmax <= 1.1.11 - Unauthenticated Local File Inclusion
Slug
filmix
Published
2024-08-29
Title
Filmix <= 1.1 - Reflected Cross-Site Scripting