WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
yaaburnee-themes
Published
2015-03-04
Title
Ya'aburnee 1.0.7 - Privilage Escalation
Slug
yacht-rental
Published
2026-02-27
Title
Yacht Rental <= 2.6 - Unauthenticated Local File Inclusion
Slug
yobazar
Published
2026-03-20
Title
Yobazar < 1.6.7 - Reflected Cross-Site Scripting
Slug
yogi
Published
2025-07-08
Title
Yogi < 2.9.3 - Authenticated (Subscriber+) PHP Object Injection
Slug
yokoo
Published
2026-02-11
Title
Yokoo <= 1.1.11 - Unauthenticated Local File Inclusion
Slug
yolox
Published
2025-12-31
Title
Yolox <= 1.0.15 - Unauthenticated Local File Inclusion
Slug
yootheme
Published
2026-06-11
Title
YOOtheme Pro < 5.0.35 - Author+ Stored XSS via UIkit Data Attributes
Slug
yottis
Published
2026-03-02
Title
Yottis <= 1.0.10 - Unauthenticated Local File Inclusion
Slug
yourjourney
Published
2023-07-26
Title
Your Journey theme <= 1.9.8 - Reflected Cross-Site Scripting via Prototype Pollution
Slug
yozi
Published
2025-05-21
Title
Yozi < 2.0.66.1 - Unauthenticated Local File Inclusion
Slug
yuki
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yuki
Published
2024-02-27
Title
Yuki < 1.3.14 - Missing Authorization to Authenticated (Subscriber+) Theme Setting Reset
Slug
yuki
Published
2024-02-27
Title
Yuki < 1.3.15 - Cross-Site Request Forgery to Theme Setting Reset
Slug
yungen
Published
2026-03-02
Title
Yungen <= 1.0.12 - Unauthenticated Local File Inclusion
Slug
yvora
Published
2014-08-01
Title
yvora - Full Path Disclosure
Slug
yvora
Published
2014-08-01
Title
yvora - Arbitrary File Upload