WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
glamchic
Published
2025-09-04
Title
GlamChic <= 1.0.11 - Unauthenticated Local File Inclusion
Slug
glamer
Published
2025-08-21
Title
Glamer <= 1.0.2 - Unauthenticated Local File Inclusion
Slug
glb
Published
2026-02-19
Title
GLB < 1.2.3 - Missing Authorization
Slug
globallogistics
Published
2026-03-02
Title
Global Logistics <= 3.20 - Unauthenticated Local File Inclusion
Slug
glossy-blog
Published
2025-04-02
Title
Glossy Blog <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
goldenblatt
Published
2025-09-23
Title
Goldenblatt < 1.3.0 - Unauthenticated PHP Object Injection
Slug
goldish
Published
2026-03-23
Title
Goldish < 3.47 - Unauthenticated PHP Object Injection
Slug
golo
Published
2020-07-15
Title
Golo < 1.3.3 - Unauthenticated Reflected XSS
Slug
golo
Published
2025-03-06
Title
Golo - Directory & Listing, Travel WordPress Theme < 1.6.11 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
Slug
golo
Published
2025-06-02
Title
Golo < 1.7.1 - Authentication Bypass to Account Takeover
Slug
golo
Published
2025-08-26
Title
Golo < 1.7.2 - Reflected Cross-Site Scripting
Slug
golo
Published
2026-02-05
Title
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
Slug
golo
Published
2026-02-05
Title
Golo < 1.7.5 - Missing Authorization
Slug
golo
Published
2026-03-12
Title
Golo <= 1.7.0 - Unauthenticated Privilege Escalation
Slug
golo
Published
2026-03-23
Title
Golo - City Travel Guide WordPress Theme < 1.7.5 - Reflected Cross-Site Scripting
Slug
good-homes
Published
2026-03-05
Title
Good Homes <= 1.3.13 - Unauthenticated Local File Inclusion
Slug
good-mood
Published
2025-09-02
Title
Good Mood <= 1.16 - Unauthenticated Local File Inclusion
Slug
goodenergy
Published
2026-02-26
Title
Good Energy <= 1.7.7 - Unauthenticated PHP Object Injection
Slug
goodnews5
Published
2016-02-29
Title
Good News Themes - Reflected Cross-Site Scripting (XSS)
Slug
goodnex
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
gostore
Published
2025-10-15
Title
GoStore < 1.6.4 - Reflected Cross-Site Scripting
Slug
goto
Published
2021-03-31
Title
Goto - Tour & Travel < 2.0 - Unauthenticated Reflected XSS
Slug
goto
Published
2021-04-26
Title
Goto < 2.1 - Unauthenticated Blind SQL Injection
Slug
goto
Published
2021-05-04
Title
Goto < 2.1 - Reflected Cross-Site Scripting (XSS)
Slug
gotravel
Published
2026-02-25
Title
GoTravel <= 2.1 - Unauthenticated Local File Inclusion