WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
wizors-investments
Published
2026-03-06
Title
Wizor's <= 2.12 - Unauthenticated Local File Inclusion
Slug
wlow
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
woffice
Published
2021-08-26
Title
Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles
Slug
woffice
Published
2024-07-01
Title
Woffice < 5.4.9 - Reflected Cross-Site Scripting
Slug
woffice
Published
2024-08-07
Title
Woffice < 5.4.12 - Unauthenticated Privilege Escalation
Slug
woffice
Published
2024-12-10
Title
Woffice < 5.4.15 - Unauthenticated Privilege Escalation
Slug
woffice
Published
2025-04-03
Title
Woffice < 5.4.22 - Authentication Bypass via Registration Role
Slug
woffice
Published
2026-01-05
Title
Woffice < 5.4.31 - Reflected Cross-Site Scripting
Slug
woffice
Published
2026-06-29
Title
Woffice CRM < 5.4.33 - Missing Authorization
Slug
wolmart
Published
2025-05-07
Title
Wolmart | Multi-Vendor Marketplace WooCommerce Theme < 1.8.12 - Unauthenticated Arbitrary Shortcode Execution in wolmart_loadmore
Slug
wolmart
Published
2026-02-25
Title
Wolmart | Multi-Vendor Marketplace WooCommerce Theme <= 1.9.6 - Unauthenticated Local File Inclusion
Slug
woo-tour
Published
2025-08-27
Title
WooTour < 3.6.4 - Reflected Cross-Site Scripting
Slug
woodmart
Published
2023-02-16
Title
WoodMart < 7.1.2 - Unauthenticated Arbitrary Shortcode Injection
Slug
woodmart
Published
2023-02-28
Title
WoodMart < 7.1.2 - License Update/Deactivation via CSRF
Slug
woodmart
Published
2023-05-11
Title
WoodMart < 7.2.2 - Subscriber+ Stored XSS
Slug
woodmart
Published
2023-09-25
Title
WoodMart < 7.2.5 - Reflected XSS
Slug
woodmart
Published
2024-12-11
Title
WoodMart < 8.0.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
woodmart
Published
2025-07-07
Title
WoodMart < 8.2.4 - Authenticated (Contributor+) Local File Inclusion
Slug
woodmart
Published
2025-07-07
Title
WoodMart < 8.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woodmart
Published
2025-07-07
Title
Woodmart < 8.2.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
woodmart
Published
2025-07-10
Title
WoodMart < 8.2.6 - Unauthenticated Post Disclosure
Slug
woodmart
Published
2025-07-25
Title
WoodMart < 8.2.7 - Unauthenticated Cart Manipulation
Slug
woodmart
Published
2025-10-14
Title
WoodMart < 8.3.2 - Authenticated (Contributor+) Local File Inclusion
Slug
woodmart
Published
2025-10-10
Title
WoodMart < 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woodmart
Published
2026-01-09
Title
WoodMart < 8.3.8 - Unauthenticated Arbitrary Shortcode Execution