WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
the-league
Published
2026-03-17
Title
The League <= 4.4.1 - Missing Authorization
Slug
the-minimal
Published
2026-02-18
Title
The Minimal < 1.3.0 - Missing Authorization
Slug
the-monday
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
the-mounty
Published
2026-02-25
Title
The Mounty | Hiking Campground & Children Camping WordPress Theme <= 1.1 - Unauthenticated Local File Inclusion
Slug
the-next
Published
2024-08-07
Title
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
Slug
the-qlean
Published
2026-03-02
Title
The Qlean <= 2.12 - Unauthenticated Local File Inclusion
Slug
the-ultralight
Published
2025-01-18
Title
UltraLight <= 1.2 - Reflected Cross-Site Scripting
Slug
the-wound
Published
2025-04-03
Title
The Wound <= 0.0.1 - Unauthenticated LFI
Slug
theagency
Published
2014-08-01
Title
TheAgency - Unspecified XSS
Slug
theaisle
Published
2025-11-27
Title
The Aisle < 2.9.1 - Missing Authorization
Slug
theaisle
Published
2026-01-16
Title
The Aisle < 2.9.1 - Unauthenticated Local File Inclusion
Slug
thebe
Published
2026-03-03
Title
Thebe <= 1.3.0 - Reflected Cross-Site Scripting
Slug
thebi
Published
2026-03-03
Title
TheBi <= 1.0.5 - Reflected Cross-Site Scripting
Slug
thecotton_v114
Published
2014-08-01
Title
The Cotton - Remote File Upload
Slug
thecs
Published
2026-03-03
Title
Thecs <= 1.4.7 - Reflected Cross-Site Scripting
Slug
theflash
Published
2025-08-22
Title
The Flash <= 1.15 - Unauthenticated Local File Inclusion
Slug
thefox
Published
2026-06-29
Title
TheFox <= 3.9.70 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thefox
Published
2026-06-29
Title
TheFox <= 3.9.76 - Reflected Cross-Site Scripting
Slug
thegem
Published
2023-12-26
Title
TheGem < 5.9.2 - Reflected Cross-Site Scripting
Slug
thegem
Published
2025-05-12
Title
TheGem < 5.10.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
thegem
Published
2025-05-12
Title
TheGem < 5.10.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update
Slug
thegem
Published
2025-09-26
Title
TheGem < 5.10.5.1 - Missing Authorization
Slug
thegem
Published
2025-09-03
Title
TheGem < 5.10.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
thegem
Published
2026-07-22
Title
TheGem <= 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thegem-elementor
Published
2025-09-26
Title
TheGem (Elementor) < 5.10.5.1 - Missing Authorization