Skip to content
Features
Pricing
Solutions
Status
API Details
CLI Scanner
Vulnerabilities
Themes
WordPress
Plugins
Stats
Submit Vulnerabilities
Leaderboard
Resources
Blog
Enterprise Features
How to Install WPScan
WPScan Glossary
2024 Website Threat Report
Search
WordPress Theme Vulnerabilities
Show Previous Letters
0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z
Show Next Letters
Slug
Published
Title
Slug
overton
Published
2026-02-25
Title
Overton - Creative WordPress Theme for Agencies and Freelancers <= 1.3 - Unauthenticated Local File Inclusion
Slug
overworld
Published
2025-12-30
Title
Overworld <= 1.3 - Unauthenticated Local File Inclusion
Slug
overworld
Published
2026-07-02
Title
Overworld - eSports and Gaming WordPress Theme <= 1.5 - Authenticated (Contributor+) Local File Inclusion
Slug
ovum
Published
2014-08-01
Title
Imediapixel - Cross-Site Scripting (XSS)
Slug
oxpitan
Published
2025-05-21
Title
Oxpitan < 1.3.6 - Unauthenticated Local File Inclusion
Slug
oxygen
Published
2026-01-27
Title
Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery
Slug
oxygen
Published
2026-03-27
Title
Oxygen < 6.0.9 - Unauthenticated Server-Side Request Forgery via route_path
Slug
oxygen-theme
Published
2014-08-01
Title
Oxygen - Remote File Upload
Slug
oyster
Published
2026-01-28
Title
Oyster - Photography WordPress <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
Slug
ozeum
Published
2026-10-08
Title
Ozeum | Art Gallery and Museum Theme <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
ozisti
Published
2026-02-27
Title
Ozisti <= 1.1.10 - Unauthenticated Local File Inclusion
Slug
ozisti
Published
2026-10-13
Title
Ozisti | Augmented Reality WooCommerce Theme <= 1.1.10 - Unauthenticated PHP Object Injection
Previous
1
2
3
Next
Subscribe
Subscribed
WPScan
Join 30,466 other subscribers
Sign me up
Have a WordPress.com account?
Log in now.
WPScan
View site in Reader
Manage subscriptions
Sign up
Log in
Report this content
Collapse this bar