WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
welowe
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
werkstatt
Published
2026-01-19
Title
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Slug
werkstatt
Published
2026-06-29
Title
Werkstatt - Creative Portfolio WordPress Theme <= 4.7.2 - Cross-Site Request Forgery
Slug
werkstatt
Published
2026-06-29
Title
Werkstatt - Creative Portfolio WordPress Theme <= 4.7.2 - Missing Authorization
Slug
werkstatt
Published
2026-06-30
Title
Werkstatt - Creative Portfolio WordPress Theme <= 4.8.3 - Authenticated (Contributor+) PHP Object Injection
Slug
westand
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
whimsy-framework
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
whiterabbit
Published
2025-08-19
Title
White Rabbit <= 1.5.2 - Unauthenticated PHP Object Injection
Slug
whitish-lite
Published
2025-03-24
Title
Whitish Lite <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wibar
Published
2020-11-30
Title
Wibar < 1.2.1 - Authenticated Stored Cross-Site Scripting
Slug
wibar
Published
2026-05-16
Title
Wibar <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wigi
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload
Slug
wiguard
Published
2026-02-17
Title
Wiguard < 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
williamson
Published
2026-02-27
Title
M.Williamson <= 1.2.11 - Unauthenticated Local File Inclusion
Slug
wilmer
Published
2025-05-21
Title
Wilmër < 3.4.2 - Unauthenticated Local File Inclusion
Slug
wilmer
Published
2025-12-15
Title
Wilmër < 3.5 - Authenticated (Contributor+) Local File Inclusion
Slug
window-ac-services
Published
2026-03-04
Title
AC Services | HVAC, Air Conditioning & Heating Company WordPress <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
windsor
Published
2026-02-27
Title
Windsor <= 2.5.0 - Unauthenticated Local File Inclusion
Slug
wineshop
Published
2026-05-27
Title
WineShop - Food & Wine Store WordPress Theme <= 3.17 - Unauthenticated Local File Inclusion
Slug
winger
Published
2025-08-19
Title
Winger <= 1.0.16 - Unauthenticated Local File Inclusion
Slug
winnex
Published
2025-05-21
Title
Winnex <= 1.3.2 - Unauthenticated Local File Inclusion
Slug
winters
Published
2023-07-26
Title
Winters theme <= 1.4.3 - Reflected Cross-Site Scripting via Prototype Pollution
Slug
wireless-butler
Published
2025-04-11
Title
Wireless Butler <= 1.0.11 - Reflected Cross-Site Scripting
Slug
wise
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
wishful-blog
Published
2023-09-05
Title
Raise Mag <= 1.0.7 and Wishful Blog <= 2.0.1 - Reflected XSS