WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
valen
Published
2025-06-09
Title
Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
Slug
valenti
Published
2026-02-18
Title
Valenti <= 5.6.3.5 - Authenticated (Contributor+) PHP Object Injection
Slug
valeska
Published
2026-04-20
Title
Valeska < 1.3 - Unauthenticated PHP Object Injection
Slug
valiance
Published
2026-04-08
Title
Valiance < 1.3 - Unauthenticated PHP Object Injection
Slug
vango
Published
2025-12-30
Title
Vango <= 1.3.3 - Unauthenticated Local File Inclusion
Slug
vantage
Published
2026-04-15
Title
Vantage < 1.20.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Block Text Content
Slug
vapester
Published
2026-02-27
Title
Vapester <= 1.1.10 - Unauthenticated Local File Inclusion
Slug
vayvo-progression
Published
2026-03-23
Title
Vayvo < 6.8 - Reflected Cross-Site Scripting
Slug
veda
Published
2025-03-04
Title
VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
veda
Published
2025-06-24
Title
VEDA <= 4.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
vegadays
Published
2026-03-06
Title
VegaDays - Vegetarian Food Festival & Eco Event WordPress Theme <= 1.2.0 - Unauthenticated Local File Inclusion
Slug
veil
Published
2026-02-26
Title
Veil - Wedding & Photographer WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Slug
velvet
Published
2014-08-01
Title
Velvet - Unspecified XSS
Slug
venice-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
verbosa
Published
2024-09-16
Title
Verbosa < 1.2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
verdure
Published
2026-01-02
Title
Verdure <= 1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
verdure
Published
2026-02-25
Title
Verdure - Organic Tea Shop WordPress Theme <= 1.6 - Unauthenticated Local File Inclusion
Slug
vernissage
Published
2015-06-26
Title
Multiple Themes - Privilige Escalation
Slug
verse
Published
2026-02-26
Title
Verse <= 1.7.0 - Unauthenticated Local File Inclusion
Slug
vertice
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
vex
Published
2026-03-20
Title
Vex < 1.2.9 - Authenticated (Subscriber+) PHP Object Injection
Slug
viable-blog
Published
2023-04-25
Title
Viable blog <= 1.1.4 - Reflected XSS
Slug
viala
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
viala
Published
2024-09-24
Title
Viala <= 1.3.1 - Reflected Cross-Site Scripting
Slug
viburno
Published
2023-08-14
Title
Multiple Themes - Reflected XSS