WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
grandnews
Published
2026-10-07
Title
Grand News <= 3.4 - Missing Authorization
Slug
grandphotography
Published
2026-02-01
Title
Grand Photography <= 5.7.8 - Cross-Site Request Forgery
Slug
grandphotography
Published
2026-07-09
Title
Grand Photography WordPress <= 5.7.8 - Unauthenticated PHP Object Injection
Slug
grandphotography
Published
2026-07-21
Title
Grand Photography WordPress <= 5.7.8 - Reflected Cross-Site Scripting
Slug
grandportfolio
Published
2026-02-13
Title
Grand Portfolio <= 3.3 - Cross-Site Request Forgery
Slug
grandprix
Published
2025-06-09
Title
GrandPrix < 1.6.1 - Unauthenticated Local File Inclusion
Slug
grandrestaurant
Published
2025-04-18
Title
Grand Restaurant WordPress <= 7.0 - Missing Authorization
Slug
grandrestaurant
Published
2025-04-18
Title
Grand Restaurant WordPress <= 7.0 - Cross-Site Request Forgery
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection via Path Traversal
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Missing Authorization to Unauthenticated Arbitrary Options Deletion
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection
Slug
grandrestaurant
Published
2026-01-05
Title
Grand Restaurant < 7.0.9 - Reflected Cross-Site Scripting
Slug
grandrestaurant
Published
2026-02-18
Title
Grand Restaurant < 7.0.11 - Unauthenticated PHP Object Injection
Slug
grandrestaurant
Published
2026-10-04
Title
Grand Restaurant WordPress < 7.0.11 - Reflected Cross-Site Scripting
Slug
grandspa
Published
2026-01-22
Title
Grand Spa < 3.5.6 - Reflected Cross-Site Scripting
Slug
grandtour
Published
2025-05-20
Title
Grand Tour | Travel Agency WordPress <= 5.5.1 - Unauthenticated PHP Object Injection
Slug
grandtour
Published
2026-01-20
Title
Grand Tour < 5.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
grandtour
Published
2026-09-02
Title
Grand Tour | Travel Agency WordPress <= 5.5.1 - Cross-Site Request Forgery
Slug
grandwedding
Published
2026-03-03
Title
Grand Wedding < 3.1.11 - Unauthenticated PHP Object Injection
Slug
granola
Published
2026-05-27
Title
Granola <= 1.13 - Unauthenticated Local File Inclusion
Slug
graphene
Published
2024-03-19
Title
Graphene < 2.9.3 - Unauthenticated Password Protected Post Access
Slug
graphene
Published
2026-09-02
Title
Graphene < 2.9.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
graphene
Published
2026-10-09
Title
Graphene < 2.9.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Fields
Slug
gravel
Published
2025-04-02
Title
Gravel <= 1.6 - Reflected Cross-Site Scripting
Slug
great-lotus
Published
2026-02-25
Title
Great Lotus | Buddhist Temple WordPress Theme + RTL <= 1.3.1 - Unauthenticated Local File Inclusion