WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
jobify
Published
2024-11-18
Title
Jobify - Job Board WordPress Theme <= 4.2.3 - Cross-Site Request Forgery
Slug
jobify
Published
2025-01-23
Title
Jobify - Job Board WordPress Theme < 4.2.8 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation
Slug
jobify
Published
2026-01-05
Title
Jobify < 4.3.1 - Reflected Cross-Site Scripting
Slug
jobroller
Published
2014-08-01
Title
XSS in jobroller theme
Slug
jobscout
Published
2024-06-28
Title
JobScout < 1.1.5 - Cross-Site Request Forgery to Notice Dimissal
Slug
jobzilla
Published
2025-08-20
Title
JobZilla - Job Board WordPress Theme < 2.0.1 - Cross-Site Request Forgery
Slug
joly
Published
2025-10-08
Title
Joly < 1.23.0 - Unauthenticated Local File Inclusion
Slug
journalcrunch
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
js-o3-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
js-o3-lite
Published
2025-01-13
Title
Js O3 Lite <= 1.5.8.2 - Reflected Cross-Site Scripting
Slug
js-paper
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
js-paper
Published
2024-10-21
Title
Js paper <= 2.5.7 - Reflected Cross-Site Scripting
Slug
jude
Published
2026-02-17
Title
Jude <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
julia-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
jupiter
Published
2022-05-18
Title
Jupiter < 6.10.2 & JupiterX Core < 2.0.8 - Subscriber+ Privilege Escalation and Post Deletion
Slug
jupiter
Published
2022-05-18
Title
Jupiter < 6.10.2 - Subscriber+ Arbitrary Plugin Deletion
Slug
jupiter
Published
2022-05-18
Title
Jupiter < 6.10.2 & JupiterX < 2.0.7 - Subscriber+ Path Traversal and Local File Inclusion
Slug
jupiterx
Published
2022-05-18
Title
JupiterX < 2.0.7 & JupiterX Core < 2.0.7 - Subscriber+ Arbitrary Plugin Deactivation and Settings Update
Slug
jupiterx
Published
2022-05-18
Title
Jupiter < 6.10.2 & JupiterX < 2.0.7 - Subscriber+ Path Traversal and Local File Inclusion
Slug
justicia
Published
2026-01-02
Title
Justicia <= 1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
justicia
Published
2026-02-25
Title
Justicia - Lawyer WordPress Theme <= 1.2 - Unauthenticated Local File Inclusion
Slug
justitia
Published
2026-03-02
Title
Justitia <= 1.1.0 - Unauthenticated Local File Inclusion