WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
unlimhost
Published
2026-02-17
Title
UnlimHost <= 1.2.3 - Unauthenticated Local File Inclusion
Slug
unlimited
Published
2025-03-28
Title
Unlimited < 1.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
unseen-blog
Published
2024-09-30
Title
Unseen Blog <= 1.0.0 - Authenticated (Contributor+) PHP Object Injection
Slug
upfrontwp
Published
2023-01-23
Title
Upfrontwp <= 1.1 - Reflected XSS
Slug
uppercase
Published
2026-04-08
Title
Uppercase < 1.2.2 - Unauthenticated Local File Inclusion
Slug
upscale
Published
2014-08-01
Title
Upscale - Unspecified XSS
Slug
upstore
Published
2025-08-02
Title
UpStore < 1.7.1 - Reflected Cross-Site Scripting
Slug
urbancity
Published
2014-09-20
Title
Urban City - download.php Local File Inclusion (LFI)
Slug
ureach
Published
2025-12-31
Title
uReach <= 1.3.3 - Unauthenticated Local File Inclusion
Slug
urna
Published
2025-08-06
Title
Urna < 2.5.8 - Unauthenticated Local File Inclusion
Slug
urna
Published
2025-12-15
Title
Urna < 2.5.13 - Authenticated (Contributor+) Local File Inclusion
Slug
urna
Published
2026-02-04
Title
Urna < 2.5.13 - Unauthenticated Local File Inclusion
Slug
urna
Published
2026-08-20
Title
Urna - All-in-one WooCommerce WordPress Theme < 2.6.3 - Unauthenticated Stored Cross-Site Scripting