WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
gowilds
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
goya
Published
2024-06-28
Title
Goya < 1.0.8.8 - Unauthenticated Reflected Cross-Site Scripting via Multiple Parameters
Slug
goza-theme
Published
2025-07-14
Title
Goza - Nonprofit Charity WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Slug
goza-theme
Published
2025-09-08
Title
Goza - Nonprofit Charity WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Slug
grace-mag
Published
2025-04-21
Title
Grace Mag <= 1.1.5 - Unauthenticated Local File Inclusion
Slug
gracey
Published
2026-03-23
Title
Gracey < 1.4 - Unauthenticated PHP Object Injection
Slug
gracioza
Published
2025-09-05
Title
Gracioza <= 1.0.15 - Unauthenticated Local File Inclusion
Slug
grandblog
Published
2026-01-02
Title
Grand Blog < 3.1.5 - Unauthenticated Server-Side Request Forgery
Slug
grandblog
Published
2026-02-13
Title
Grand Blog <= 3.1 - Cross-Site Request Forgery
Slug
grandcarrental
Published
2026-02-13
Title
Grand Car Rental <= 3.6.9 - Cross-Site Request Forgery
Slug
grandconference
Published
2026-02-03
Title
Grand Conference < 5.3.5 - Reflected Cross-Site Scripting
Slug
grandmagazine
Published
2026-01-22
Title
Grand Magazine < 3.5.8 - Reflected Cross-Site Scripting
Slug
grandmagazine
Published
2026-02-13
Title
Grand Magazine <= 3.5.5 - Cross-Site Request Forgery
Slug
grandnews
Published
2026-02-25
Title
Grand News <= 3.4.3 - Reflected Cross-Site Scripting
Slug
grandphotography
Published
2026-02-01
Title
Grand Photography <= 5.7.8 - Cross-Site Request Forgery
Slug
grandportfolio
Published
2026-02-13
Title
Grand Portfolio <= 3.3 - Cross-Site Request Forgery
Slug
grandprix
Published
2025-06-09
Title
GrandPrix < 1.6.1 - Unauthenticated Local File Inclusion
Slug
grandrestaurant
Published
2025-04-18
Title
Grand Restaurant WordPress <= 7.0 - Missing Authorization
Slug
grandrestaurant
Published
2025-04-18
Title
Grand Restaurant WordPress <= 7.0 - Cross-Site Request Forgery
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection via Path Traversal
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Missing Authorization to Unauthenticated Arbitrary Options Deletion
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection
Slug
grandrestaurant
Published
2026-01-05
Title
Grand Restaurant < 7.0.9 - Reflected Cross-Site Scripting
Slug
grandrestaurant
Published
2026-02-18
Title
Grand Restaurant < 7.0.11 - Unauthenticated PHP Object Injection
Slug
grandspa
Published
2026-01-22
Title
Grand Spa < 3.5.6 - Reflected Cross-Site Scripting