WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Subscriber+ Local File Inclusion
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Cross-Site Request Forgery to Account Takeover
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Unauthenticated SQL Injection
Slug
listingpro
Published
2025-10-19
Title
ListingPro <= 2.9.9 - Missing Authorization
Slug
listivo
Published
2025-02-12
Title
Listivo - Classified Ads WordPress Theme < 2.3.68 - Reflected Cross-Site Scripting
Slug
lms
Published
2025-06-23
Title
LMS <= 9.1 - Reflected Cross-Site Scripting
Slug
lms
Published
2025-06-30
Title
LMS <= 9.1 - Unauthenticated SQL Injection
Slug
lobo
Published
2025-11-14
Title
Lobo < 2.8.7 - Missing Authorization
Slug
logistics-hub
Published
2025-06-30
Title
LogisticsHub <= 1.1.6 - Unauthenticated Arbitrary File Upload
Slug
looki-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
lote27
Published
2014-09-28
Title
lote27 Theme - Arbitrary File Download
Slug
lovetravel
Published
2020-11-12
Title
Love Travel < 2.0 - Unauthenticated Reflected XSS & XFS
Slug
lovetravel
Published
2020-11-12
Title
Love Travel 2.0-3.8 - Unauthenticated Reflected XSS & XFS
Slug
luique
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion
Slug
luxe
Published
2021-03-24
Title
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Slug
luxe
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update