WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
m2-ce
Published
2026-03-05
Title
m2 | Construction and Tools Store <= 1.1.2 - Unauthenticated PHP Object Injection
Slug
mTheme-Unus
Published
2015-09-30
Title
mTheme-Unus Theme - Local File Inclusion (LFI)
Slug
mTheme-Unus
Published
2015-09-30
Title
mTheme Unus < 2.3 - Directory Traversal
Slug
machic
Published
2023-12-07
Title
Multiple Themes by KlbTheme - Cross-Site Request Forgery
Slug
madara
Published
2025-05-20
Title
Madara – Responsive and modern WordPress theme for manga sites < 2.2.2.1 - Unauthenticated Local File Inclusion
Slug
magazine-basic
Published
2014-08-01
Title
Magazine Basic - wp-content/themes/magazine-basic/view_artist.php id Parameter SQL Injection
Slug
magazine-edge
Published
2023-02-02
Title
Magazine Edge <= 1.13 - Subscriber+ Arbitrary Plugin Activation
Slug
magazine-elite
Published
2025-08-21
Title
Magazine Elite <= 1.2.4 - Unauthenticated Local File Inclusion
Slug
magazine-saga
Published
2025-08-25
Title
Magazine Saga <= 1.2.7 - Unauthenticated Local File Inclusion
Slug
magnitudo
Published
2014-08-01
Title
Magnitudo - Arbitrary File Upload
Slug
magone
Published
2025-06-23
Title
MagOne < 8.9 - Reflected Cross-Site Scripting
Slug
mags
Published
2024-10-21
Title
Mags < 1.1.7 - Unauthenticated Local File Inclusion
Slug
magty
Published
2025-06-25
Title
Magty < 1.0.7 - Unauthenticated Local File Inclusion
Slug
magways
Published
2025-06-25
Title
Magways < 1.2.2 - Unauthenticated Local File Inclusion
Slug
magze
Published
2025-06-25
Title
Magze < 1.0.10 - Unauthenticated Local File Inclusion
Slug
mahogany
Published
2026-02-27
Title
Mahogany <= 2.9 - Unauthenticated Local File Inclusion
Slug
maia
Published
2025-06-11
Title
Maia < 1.1.16 - Unauthenticated Local File Inclusion
Slug
make_a_statement
Published
2014-08-01
Title
Make A Statement - CSRF
Slug
makeaholic
Published
2025-08-14
Title
Makeaholic < 1.8.5 - Unauthenticated Local File Inclusion
Slug
makeaholic
Published
2025-08-27
Title
Makeaholic < 1.8.7 - Missing Authorization
Slug
malgre
Published
2026-02-25
Title
Malgré <= 1.0.3 - Unauthenticated Local File Inclusion
Slug
malmonation
Published
2014-08-01
Title
Malmonation - debate.php id Parameter SQL Injection
Slug
malta
Published
2025-12-31
Title
Malta <= 1.3.3 - Unauthenticated Local File Inclusion
Slug
mamita
Published
2025-09-05
Title
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
Slug
manbiz2
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure