WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
arya-multipurpose-pro
Published
2023-08-29
Title
Arya Multipurpose Pro <= 1.0.8 - Reflected XSS
Slug
ashe
Published
2024-07-01
Title
Ashe < 2.234 - Cross-Site Request Forgery to Notice Dismissal
Slug
ashe
Published
2024-11-18
Title
Ashe < 2.244 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
ashley
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion
Slug
ask-me
Published
2022-10-28
Title
Ask Me < 6.8.7 - Post Deletion via CSRF
Slug
ask-me
Published
2022-05-16
Title
Ask Me < 6.8.2 - Reflected Cross-Site Scripting
Slug
ask-me
Published
2022-05-16
Title
Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions
Slug
ask-me
Published
2022-08-01
Title
Ask Me < 6.8.4 - CSRF in Edit Profile
Slug
astore
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
astra
Published
2024-03-25
Title
Astra < 4.6.9 - Contributor+ Stored XSS
Slug
astra
Published
2024-03-25
Title
Astra < 4.6.5 - Editor+ Stored XSS via Theme Header/Footer
Slug
atahualpa
Published
2017-03-01
Title
Atahualpa Theme - Authenticated Cross-Site Scripting (XSS)
Slug
atahualpa
Published
2011-09-27
Title
Atahualpa < 3.6.8 - XSS
Slug
atlast-business
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
attire
Published
2024-08-30
Title
Attire < 2.0.7 - Authenticated (Contributor+) PHP Object Injection
Slug
attorney
Published
2022-10-30
Title
Attorney <= 3 - Unauthenticated Arbitrary Page/Post Deletion
Slug
attorney
Published
2023-10-02
Title
Attorney <= 3 - Reflected XSS
Slug
auberge
Published
2015-05-12
Title
Auberge Theme <= 1.4.4 - DOM Cross-Site Scripting (XSS)
Slug
auramart
Published
2025-03-24
Title
AuraMart <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aurum-minimalist-shopping-theme
Published
2025-01-06
Title
Aurum - WordPress & WooCommerce Shopping Theme < 4.0.3 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import
Slug
authentic
Published
2015-03-03
Title
Authentic Theme - Arbitrary File Download
Slug
auto-car
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
avada
Published
2024-01-29
Title
Avada < 7.11.2 - Subscriber+ Portfolio Permalinks Creation
Slug
avada
Published
2024-01-29
Title
Avada < 7.11.2 - Contributor+ SSRF
Slug
avada
Published
2024-01-29
Title
Avada < 7.11.2 - Author+ Arbitrary File Upload via Zip Extraction