WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
t1
Published
2023-07-19
Title
T1 theme <= 19.0 - Open Redirect
Slug
taina
Published
2025-04-02
Title
Tainá <= 0.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
tainacan-interface
Published
2024-04-15
Title
Tainacan Interface < 2.7.2 - Reflected Cross-Site Scripting
Slug
tantyyellow
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
tantyyellow
Published
2025-01-17
Title
Tantyyellow <= 1.0.0.5 - Reflected Cross-Site Scripting
Slug
tastyc
Published
2025-04-15
Title
Tastyc < 2.5.2 - Unauthenticated Local File Inclusion
Slug
teardrop
Published
2015-06-26
Title
Multiple Themes - Privilige Escalation
Slug
techism
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
temp-mail-x
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tempera
Published
2024-08-26
Title
Tempera <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tevily
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
th-shop-mania
Published
2024-11-08
Title
Th Shop Mania < 1.5.0 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
the-authority
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
the-conference
Published
2024-04-10
Title
The Conference < 1.2.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
the-launcher
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
the-monday
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
the-next
Published
2024-08-07
Title
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
Slug
the-ultralight
Published
2025-01-18
Title
UltraLight <= 1.2 - Reflected Cross-Site Scripting
Slug
the-wound
Published
2025-04-03
Title
The Wound <= 0.0.1 - Unauthenticated LFI
Slug
theagency
Published
2014-08-01
Title
TheAgency - Unspecified XSS
Slug
theaisle
Published
2025-11-27
Title
The Aisle < 2.9.1 - Missing Authorization
Slug
thecotton_v114
Published
2014-08-01
Title
The Cotton - Remote File Upload
Slug
thegem
Published
2023-12-26
Title
TheGem < 5.9.2 - Reflected Cross-Site Scripting
Slug
thegem
Published
2025-05-12
Title
TheGem < 5.10.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
thegem
Published
2025-05-12
Title
TheGem < 5.10.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update