WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
lendiz
Published
2026-03-03
Title
Lendiz < 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
lenxel-wp
Published
2026-07-21
Title
Lenxel WP <= 1.0.31 - Unauthenticated Account Takeover via Arbitrary Password Reset
Slug
leroux
Published
2026-03-23
Title
Leroux - Business Consulting WordPress Theme < 1.4 - Unauthenticated PHP Object Injection
Slug
lestin
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
letruffe
Published
2026-02-27
Title
Le Truffe <= 1.1.7 - Unauthenticated Local File Inclusion
Slug
lettuce
Published
2025-09-05
Title
Lettuce <= 1.1.7 - Unauthenticated Local File Inclusion
Slug
lifestyle-magazine
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
lighthouseschool
Published
2026-06-29
Title
Lighthouse <= 1.2.12 - Unauthenticated Local File Inclusion
Slug
lightspeed
Published
2014-08-01
Title
LightSpeed - Valums Uploader Shell Upload Exploit
Slug
lindo
Published
2025-12-30
Title
Lindo <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
lineagency
Published
2026-05-27
Title
Line Agency <= 1.3.1 - Unauthenticated Local File Inclusion
Slug
linenity
Published
2014-08-01
Title
LineNity 1.20 - download.php imgurl Parameter Remote Path Traversal File Access
Slug
lingvico
Published
2026-03-02
Title
Lingvico <= 1.0.14 - Unauthenticated Local File Inclusion
Slug
lione
Published
2025-08-30
Title
Lione <= 1.16 - Unauthenticated Local File Inclusion
Slug
liquido
Published
2024-08-29
Title
Liquido <= 1.0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listee
Published
2026-02-26
Title
Listee < 1.1.7 - Unauthenticated Privilege Escalation
Slug
listeo
Published
2021-05-16
Title
Listeo < 1.6.11 - Multiple XSS & XFS vulnerabilities
Slug
listeo
Published
2021-05-16
Title
Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities
Slug
listeo
Published
2025-10-24
Title
Listeo < 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode
Slug
listify
Published
2025-10-22
Title
Listify <= 3.2.5 - Cross-Site Request Forgery
Slug
listify
Published
2026-03-02
Title
Listify <= 3.2.5 - Reflected Cross-Site Scripting
Slug
listihub
Published
2026-01-22
Title
Listihub <= 1.0.6 - Missing Authorization
Slug
listingeasy
Published
2025-07-07
Title
ListingEasy <= 1.9.2 - Reflected Cross-Site Scripting
Slug
listingo
Published
2022-11-21
Title
Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload
Slug
listingo
Published
2025-03-04
Title
Listingo - Business Listing and Directory WordPress Theme <= 3.2.7 - Unauthenticated Arbitrary Shortcode Execution