WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
g-blog
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gable
Published
2026-02-11
Title
Gable <= 1.5 - Unauthenticated Local File Inclusion
Slug
gaga-corp
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
gaga-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
gameplan
Published
2024-11-13
Title
Gameplan <= 1.5.10 - Reflected Cross-Site Scripting
Slug
gamezone
Published
2026-02-27
Title
Gamezone <= 1.1.11 - Unauthenticated Local File Inclusion
Slug
gardis
Published
2025-09-04
Title
Gardis <= 1.2.13 - Unauthenticated Local File Inclusion
Slug
gaspard
Published
2026-03-05
Title
Gaspard <= 1.3 - Unauthenticated Local File Inclusion
Slug
gauge
Published
2026-01-27
Title
Gauge <= 6.56.4 - Missing Authorization
Slug
gecko
Published
2026-01-01
Title
Gecko <= 1.9.8 - Unauthenticated Local File Inclusion
Slug
gecko
Published
2026-02-24
Title
Gecko 6.0 - Responsive Shopify Theme - RTL support <= 1.9.8 - Reflected Cross-Site Scripting
Slug
gema-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
genemy
Published
2025-12-31
Title
Genemy <= 1.6.6 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
genesis
Published
2025-10-24
Title
Open Source Genesis Framework < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
geomagazine
Published
2020-08-17
Title
Geo Magazine <= 2.0 - Unauthenticated Reflected XSS
Slug
geoplaces4
Published
2014-08-01
Title
GeoPlaces - File Upload H&ling Remote Comm& Execution
Slug
geoplaces4beta
Published
2014-08-01
Title
GeoPlaces - File Upload H&ling Remote Comm& Execution
Slug
ghost
Published
2014-08-01
Title
Ghost - Arbitrary File Upload
Slug
ghostwriter
Published
2025-01-18
Title
Ghostwriter <= 1.4 - Reflected Cross-Site Scripting
Slug
giardino
Published
2025-08-04
Title
Giardino <= 1.1.10 - Unauthenticated Local File Inclusion
Slug
gioia
Published
2026-03-05
Title
Gioia <= 1.4 - Unauthenticated Local File Inclusion
Slug
givingpress-lite
Published
2024-08-16
Title
GivingPress Lite <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
glamchic
Published
2025-09-04
Title
GlamChic <= 1.0.11 - Unauthenticated Local File Inclusion
Slug
glamer
Published
2025-08-21
Title
Glamer <= 1.0.2 - Unauthenticated Local File Inclusion
Slug
globallogistics
Published
2026-03-02
Title
Global Logistics <= 3.20 - Unauthenticated Local File Inclusion