WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
naturemag-lite
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
neighborly
Published
2024-09-12
Title
Neighborly <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
neom-blog
Published
2025-06-06
Title
Neom Blog < 0.1.0 - Reflected Cross-Site Scripting
Slug
neosense
Published
2016-09-19
Title
Neosense Theme < 1.8 - Unrestricted File Upload
Slug
neresa-wp
Published
2025-08-27
Title
Neresa < 1.4 - Unauthenticated Local File Inclusion
Slug
networker
Published
2024-03-26
Title
Networker - Tech News WordPress Theme with Dark Mode < 1.1.10 - Missing Authorization
Slug
networker
Published
2025-07-01
Title
Networker < 1.2.2 - Unauthenticated Local File Inclusion
Slug
neuronet
Published
2025-10-07
Title
Neuronet < 1.14.0 - Unauthenticated Local File Inclusion
Slug
news
Published
2011-09-27
Title
News < 0.2 - XSS
Slug
news-event
Published
2025-10-16
Title
News Event < 1.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
news-flash
Published
2024-08-07
Title
News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection
Slug
news-magazine-x
Published
2025-07-28
Title
News Magazine X < 1.2.38 - Unauthenticated Local File Inclusion
Slug
news-unlimited
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
newsblogger
Published
2025-04-30
Title
NewsBlogger < 0.2.5.5 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Slug
newsblogger
Published
2025-04-30
Title
NewsBlogger < 0.2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
newscard
Published
2024-10-24
Title
NewsCard < 1.4 - Unauthenticated Local File Inclusion
Slug
newscrunch
Published
2025-03-03
Title
Newscrunch < 1.8.4.1 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
newscrunch
Published
2025-03-03
Title
Newscrunch < 1.8.4.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
newsdaily
Published
2024-12-19
Title
NewsDaily <= 1.0.64 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newseqo
Published
2025-03-24
Title
newseqo <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newshit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
newsmag
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
newsmag
Published
2023-03-16
Title
Newsmag <= 2.4.4 - Subscriber+ Reflected Cross-Site Scripting
Slug
newsmash
Published
2024-06-28
Title
NewsMash < 1.0.35 - Cross-Site Request Forgery to Notice Dismissal
Slug
newsmash
Published
2024-12-05
Title
NewsMash < 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting