WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
listingeasy
Published
2025-07-07
Title
ListingEasy <= 1.9.2 - Reflected Cross-Site Scripting
Slug
listingo
Published
2022-11-21
Title
Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload
Slug
listingo
Published
2025-03-04
Title
Listingo - Business Listing and Directory WordPress Theme <= 3.2.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
listingpro
Published
2019-11-29
Title
ListingPro < 2.0.14.5 - Reflected & Persistent Cross-Site Scripting
Slug
listingpro
Published
2020-01-15
Title
ListingPro < 2.5.4 - Unauthenticated Reflected Cross-Site Scripting
Slug
listingpro
Published
2020-12-17
Title
ListingPro < 2.6.1 - Unauthenticated Arbitrary Plugin Installation/Activation/Deactivation
Slug
listingpro
Published
2020-12-17
Title
ListingPro < 2.6.1 - Unauthenticated Sensitive Data Disclosure (Usernames, Emails etc)
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Subscriber+ Local File Inclusion
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Cross-Site Request Forgery to Account Takeover
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Unauthenticated SQL Injection
Slug
listingpro
Published
2025-10-19
Title
ListingPro <= 2.9.9 - Missing Authorization
Slug
listingpro
Published
2025-11-06
Title
ListingPro <= 2.9.9 - Missing Authorization
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Unauthenticated Local File Inclusion
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Reflected Cross-Site Scripting
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Missing Authorization
Slug
listingpro
Published
2026-06-24
Title
ListingPro - WordPress Directory & Listing Theme < 2.9.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
listivo
Published
2025-02-12
Title
Listivo - Classified Ads WordPress Theme < 2.3.68 - Reflected Cross-Site Scripting
Slug
little-birdies
Published
2026-02-26
Title
Little Birdies | Multipurpose Children PSD Template <= 1.3.16 - Unauthenticated Local File Inclusion
Slug
little-birdies
Published
2026-10-21
Title
Little Birdies | Multipurpose Children PSD Template <= 1.3.16 - Unauthenticated PHP Object Injection
Slug
lms
Published
2025-06-23
Title
LMS < 9.3 - Reflected Cross-Site Scripting
Slug
lms
Published
2025-06-30
Title
LMS < 9.3 - Unauthenticated SQL Injection
Slug
lms
Published
2026-06-30
Title
LMS <= 9.7 - Reflected Cross-Site Scripting
Slug
lms
Published
2026-10-08
Title
LMS <= 8.3 - Unauthenticated Stored Cross-Site Scripting
Slug
lobo
Published
2025-11-14
Title
Lobo < 2.8.7 - Missing Authorization
Slug
lobo
Published
2026-01-05
Title
Lobo < 2.8.6 - Authenticated (Subscriber+) SQL Injection