WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
purity
Published
2014-08-01
Title
Purity - Multiple Cross-Site Scripting Vulnerabilities
Slug
purity-of-soul
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
purity-of-soul
Published
2024-08-16
Title
Purity Of Soul <= 1.9 - Reflected Cross-Site Scripting
Slug
purosa
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
purosa
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
purus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
purus
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
purus
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
putter
Published
2026-05-26
Title
Putter <= 1.17 - Unauthenticated Local File Inclusion
Slug
puzzles
Published
2025-02-11
Title
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL < 4.2.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
puzzles
Published
2025-02-12
Title
Puzzles < 4.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
puzzles
Published
2025-02-12
Title
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL < 4.2.5 - Unauthenticated PHP Object Injection