WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
adforest
Published
2025-12-04
Title
AdForest < 6.0.12 - Missing Authorization
Slug
adifier
Published
2023-11-29
Title
Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting
Slug
adifier-system
Published
2023-12-04
Title
Adifier System < 3.1.4 - Unauthenticated SQL Injection
Slug
adifier-system
Published
2023-12-04
Title
Adifier System < 3.1.4 - Unauthenticated Local File Inclusion
Slug
adventure-journal
Published
2024-04-29
Title
Adventure Journal <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
affluent
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
agency-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
agncy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
agritourismo-theme
Published
2014-08-01
Title
Agritourismo - Remote File Upload
Slug
aidreform
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
aihub
Published
2025-04-18
Title
AIHub < 1.3.8 - Unauthenticated Arbitrary File Upload in generate_image
Slug
aihub
Published
2025-04-10
Title
AI Hub - Startup & Technology WordPress Theme <= 1.3.3 - Unauthenticated Arbitrary File Upload
Slug
aihub
Published
2025-08-27
Title
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Slug
airin-blog
Published
2024-11-13
Title
Airin Blog < 1.6.3 - Unauthenticated PHP Object Injection
Slug
akal
Published
2016-08-22
Title
Akal Theme - Reflected Cross-Site Scripting (XSS)
Slug
allegiant
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
allegiant
Published
2024-08-16
Title
Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
alloggio
Published
2025-03-30
Title
Alloggio - Hotel Booking <= 1.8 - Unauthenticated Local File Inclusion
Slug
alltuts
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
allure-real-estate-theme-for-placester
Published
2014-08-01
Title
allure-real-estate-theme-for-placester <= 0.1.1 - XSS in ZeroClipboard.swf
Slug
allure-real-estate-theme-for-real-estate
Published
2014-08-01
Title
allure-real-estate-theme-for-real-estate <= 0.1.1 - XSS in ZeroClipboard.swf
Slug
almera
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
alone
Published
2025-07-01
Title
Alone < 7.8.5 - Unauthenticated Remote Code Execution
Slug
alone
Published
2025-07-14
Title
Alone – Charity Multipurpose Non-profit WordPress Theme < 7.8.7 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Slug
alone
Published
2025-07-14
Title
Alone – Charity Multipurpose Non-profit WordPress Theme < 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation