WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
relax-spa
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
remons
Published
2026-03-03
Title
Remons < 1.3.5 - Unauthenticated Local File Inclusion
Slug
renden
Published
2026-02-18
Title
Renden <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Slug
renewal
Published
2025-08-04
Title
Renewal <= 1.2.2 - Unauthenticated Local File Inclusion
Slug
rentic
Published
2025-09-02
Title
Rentic <= 1.1 - Unauthenticated Local File Inclusion
Slug
reprizo
Published
2026-01-12
Title
Reprizo <= 1.0.8 - Unauthenticated Local File Inclusion
Slug
resca
Published
2025-09-10
Title
Resca < 3.0.3 - Reflected Cross-Site Scripting
Slug
resido
Published
2025-03-13
Title
Resido - Real Estate WordPress Theme < 3.6.1 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update
Slug
responsive
Published
2024-03-28
Title
Responsive < 5.0.3 - Missing Authorization to HMTL Injection
Slug
responsive
Published
2024-06-03
Title
Responsive < 5.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
responsive-mobile
Published
2024-07-10
Title
Responsive Mobile <= 1.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
restaurant-and-cafe
Published
2024-05-03
Title
Restaurant and Cafe < 1.2.2 - Cross-Site Request Forgery to Notice Dismissal
Slug
restaurant-cafeteria
Published
2026-03-06
Title
Restaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/Activation
Slug
restaurant-pt
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
restaurante
Published
2025-08-10
Title
Restaurante < 3.1.1 - Reflected Cross-Site Scripting
Slug
restaurt
Published
2026-01-13
Title
Restaurt <= 1.0.4 - Authenticated (subscriber+) Arbitrary File Upload
Slug
restricted-site-access
Published
2023-11-27
Title
Restricted Site Access <= 7.4.1 - IP Spoofing to Protection Mechanism Bypass
Slug
rethink
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
revivenews
Published
2024-08-28
Title
ReviveNews < 1.0.3 - Missing Authorization via revivenews_install_and_activate_plugins()
Slug
revo
Published
2025-06-03
Title
Revo <= 4.0.26 - Unauthenticated Local File Inclusion
Slug
revolution
Published
2025-10-18
Title
Revolution < 2.5.8 - Authenticated (Subscriber+) Local File Inclusion
Slug
revolve
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
rexcoin
Published
2026-02-27
Title
RexCoin <= 1.2.6 - Unauthenticated Local File Inclusion
Slug
rezo
Published
2025-04-01
Title
Multiple Themify Themes - Reflected Cross-Site Scripting
Slug
rezo
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload