WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary Directory Deletion
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.5.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.1 - Missing Authorization to Unauthenticated User Token Generation
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.5.2 - Authenticated (Instructor+) Arbitrary File Upload
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary File Upload
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion
Slug
wplms
Published
2024-12-17
Title
WPLMS < 1.9.9.1 - Unauthenticated Privilege Escalation
Slug
wplms
Published
2025-09-22
Title
WPLMS < 4.971 - Missing Authorization
Slug
wplms
Published
2026-10-05
Title
WPLMS Learning Management System for WordPress, WordPress LMS <= 4.972 - Reflected Cross-Site Scripting
Slug
wplms
Published
2026-10-02
Title
WPLMS Learning Management System for WordPress, WordPress LMS < 4.974 - Authenticated (Subscriber+) SQL Injection
Slug
wplocalplaces
Published
2014-08-01
Title
WPLocalPlaces - File Upload Remote Code Execution
Slug
wprentals
Published
2025-08-14
Title
WP Rentals < 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wprentals
Published
2025-03-23
Title
Rentals <= 3.13.1 - Cross-Site Request Forgery
Slug
wprentals
Published
2026-09-04
Title
WP Rentals - Booking Accommodation WordPress Theme < 3.16.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
wprentals
Published
2026-10-07
Title
WP Rentals - Booking Accommodation WordPress Theme <= 3.14.2 - Missing Authorization
Slug
wpresidence
Published
2025-10-27
Title
WpResidence < 5.3.2.1 - Missing Authorization
Slug
wproject
Published
2025-04-22
Title
wProject < 5.8.0 - Reflected Cross-Site Scripting
Slug
wproject
Published
2025-04-22
Title
wProject < 5.8.0 - Authenticated (Subscriber+) Privilege Escalation
Slug
wproject
Published
2025-04-22
Title
wProject < 5.8.0 - Missing Authorization to Unauthenticated Content Modification and Deletion
Slug
wr-nitro
Published
2021-11-03
Title
WooRockets Nitro <= 1.7.9 - Unauthenticated Arbitrary Plugin Installation
Slug
wyzi-business-finder
Published
2021-02-06
Title
Wyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)