WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
activello
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
activello
Published
2022-11-23
Title
Activello <= 1.4.4 - Reflected XSS
Slug
addison
Published
2025-09-23
Title
Addison < 1.4.8 - Unauthenticated PHP Object Injection
Slug
adforest
Published
2025-01-07
Title
AdForest - Classified Ads WordPress Theme < 5.1.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion
Slug
adforest
Published
2024-12-20
Title
AdForest < 5.1.7 - Authentication Bypass
Slug
adforest
Published
2024-12-20
Title
AdForest < 5.1.7 - Privilege Escalation via Password Reset/Account Takeover
Slug
adforest
Published
2025-01-21
Title
AdForest < 5.1.9 - Authentication Bypass
Slug
adforest
Published
2025-09-05
Title
AdForest < 6.0.10 - Authentication Bypass
Slug
adforest
Published
2025-12-04
Title
AdForest < 6.0.12 - Missing Authorization
Slug
adforest
Published
2026-01-20
Title
AdForest < 6.0.12 - Unauthenticated Local File Inclusion
Slug
adforest
Published
2026-02-11
Title
AdForest < 6.0.13 - Authentication Bypass
Slug
adifier
Published
2023-11-29
Title
Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting
Slug
adifier-system
Published
2023-12-04
Title
Adifier System < 3.1.4 - Unauthenticated SQL Injection
Slug
adifier-system
Published
2023-12-04
Title
Adifier System < 3.1.4 - Unauthenticated Local File Inclusion
Slug
adrena
Published
2026-08-06
Title
Adrena | Airsoft Club & Paintball WordPress Theme <= 1.2.14 - Unauthenticated PHP Object Injection
Slug
adventure-journal
Published
2024-04-29
Title
Adventure Journal <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advice
Published
2026-08-06
Title
Advice - Psychology, Therapy & Counseling Theme <= 1.18.0 - Unauthenticated PHP Object Injection
Slug
aeroland
Published
2026-01-07
Title
AeroLand <= 1.6.6 - Unauthenticated Local File Inclusion
Slug
affluent
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
agency-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
agncy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
agora
Published
2026-08-06
Title
Agora — Event & Conference WordPress Theme <= 1.9 - Unauthenticated PHP Object Injection
Slug
agricola
Published
2025-08-19
Title
Agricola <= 1.1.0 - Unauthenticated Local File Inclusion
Slug
agricola
Published
2026-08-06
Title
Agricola - Agriculture & Organic Farm Theme <= 1.21.0 - Unauthenticated PHP Object Injection
Slug
agrion
Published
2026-08-06
Title
Agrion <= 1.0.0 - Reflected Cross-Site Scripting