WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
radcliffe-2
Published
2024-06-06
Title
Radcliffe 2 < 2.0.18 - Missing Authorization
Slug
radial-theme
Published
2014-08-01
Title
Radial - Remote File Upload
Slug
rainbownews
Published
2025-03-24
Title
RainbowNews <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
raindrops
Published
2024-05-06
Title
raindrops < 1.700 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
raise-mag
Published
2023-09-05
Title
Raise Mag <= 1.0.7 and Wishful Blog <= 2.0.1 - Reflected XSS
Slug
rambo
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
rapyd-payments
Published
2025-03-27
Title
Rapyd Payment Extension for WooCommerce <= 1.1.9 - Unauthenticated PHP Object Injection
Slug
rara-business
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
rara-business
Published
2024-07-04
Title
Rara Business < 1.2.6 - Cross-Site Request Forgery to Notice Dismissal
Slug
rayoflight-theme
Published
2014-08-01
Title
Ray of Light - Remote File Upload
Slug
real-spaces
Published
2025-08-18
Title
Real Spaces - WordPress Properties Directory Theme < 3.6 - Authenticated (Subscriber+) Privilege Escalation to Administrator via 'change_role_member'
Slug
real-spaces
Published
2025-08-18
Title
Real Spaces - WordPress Properties Directory Theme < 3.6.1 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'
Slug
reales-wp-real-estate-wordpress-theme
Published
2025-04-23
Title
Reales WP - Real Estate WordPress Theme <= 2.1.2 - Missing Authorization to Unauthenticated Attachment Deletion and Favorite Property Updates
Slug
realestate-7
Published
2019-07-29
Title
Real Estate 7 < 2.9.1 - Stored XSS & IDOR
Slug
realestate-7
Published
2020-01-14
Title
Real Estate 7 < 2.9.5 - Multiple Vulnerabilities
Slug
realestate-7
Published
2020-07-27
Title
Real Estate 7 < 3.0.4 - Unauthenticated Reflected XSS
Slug
realestate-7
Published
2020-08-29
Title
Real Estate 7 < 3.0.5 - Unauthenticated Reflected XSS
Slug
realestate-7
Published
2023-02-20
Title
Real Estate 7 < 3.3.2 - Reflected XSS
Slug
realestate-7
Published
2023-02-28
Title
Real Estate 7 < 3.3.5 - Reflected XSS
Slug
realestate-7
Published
2023-02-28
Title
Real Estate 7 < 3.3.5 - Multiple CSRF
Slug
realestate-7
Published
2021-06-10
Title
Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)
Slug
realestate-7
Published
2025-02-11
Title
Real Estate 7 WordPress < 3.5.2 - Unauthenticated Privilege Escalation
Slug
realestate-7
Published
2025-03-31
Title
WP Pro Real Estate 7 < 3.5.5 - Authenticated (Custom) Arbitrary File Upload
Slug
realestate-7
Published
2025-04-17
Title
Real Estate 7 < 3.5.3 - Unauthenticated Privilege Escalation
Slug
realhomes
Published
2025-01-20
Title
WordPress RealHomes Theme < 4.3.7 - Privilege Escalation