WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
soho
Published
2026-01-29
Title
SOHO - Photography WordPress <= 3.0.3 - Unauthenticated Stored Cross-Site Scripting
Slug
soho-hotel
Published
2025-06-04
Title
Soho Hotel <= 4.2.5 - Reflected Cross-Site Scripting
Slug
solace
Published
2026-01-13
Title
Solace <= 2.1.16 - Missing Authorization
Slug
solar
Published
2025-05-30
Title
Solar Energy <= 3.5 - Authenticated (Subscriber+) PHP Object Injection
Slug
solaris
Published
2026-03-03
Title
Solaris <= 2.5 - Unauthenticated PHP Object Injection
Slug
soledad
Published
2022-10-30
Title
Soledad < 8.2.6 - Subscriber+ Cross-Site Scripting
Slug
soledad
Published
2022-09-13
Title
Soledad < 8.2.5 - Reflected Cross-site Scripting
Slug
soledad
Published
2023-12-05
Title
Soledad < 8.4.2 - Unauthenticated PHP Object Injection
Slug
soledad
Published
2023-12-05
Title
Soledad < 8.4.2 - Authenticated (Contributor+) SQL Injection
Slug
soledad
Published
2023-12-05
Title
Soledad < 8.4.2 - Reflected Cross-Site Scripting
Slug
soledad
Published
2024-04-09
Title
Soledad < 8.4.6 - Missing Authorization
Slug
soledad
Published
2024-04-09
Title
Soledad < 8.4.6 - Missing Authorization
Slug
soledad
Published
2024-04-09
Title
Soledad < 8.4.6 - Cross-Site Request Forgery
Slug
soledad
Published
2024-12-05
Title
Soledad < 8.6.0 - Unauthenticated Limited Local File Inclusion
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Unauthenticated Arbitrary Shortcode Execution
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Slug
soledad
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Local File Inclusion
Slug
soledad
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
soledad
Published
2025-10-23
Title
Soledad < = 8.6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
soledad
Published
2025-10-28
Title
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
Slug
soledad
Published
2026-01-10
Title
Soledad <= 8.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
soleil
Published
2025-08-19
Title
Soleil <= 1.17 - Unauthenticated Local File Inclusion
Slug
solene
Published
2026-04-08
Title
Solene < 3.4.1 - Unauthenticated Local File Inclusion
Slug
soleng
Published
2026-02-17
Title
Soleng <= 1.0.5 - Unauthenticated Local File Inclusion