WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
aports
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
appius
Published
2014-08-01
Title
appius - Full Path Disclosure
Slug
appius
Published
2014-08-01
Title
appius - Arbitrary File Upload
Slug
appius
Published
2014-08-01
Title
appius - Custom Background Shell Upload
Slug
appointment
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
appzend
Published
2025-07-28
Title
Appzend < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter
Slug
aqualots
Published
2026-02-27
Title
Aqualots <= 1.1.6 - Unauthenticated Local File Inclusion
Slug
aquarella-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
aquarella-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
arcane
Published
2025-12-29
Title
Arcane <= 3.6.6 - Missing Authorization
Slug
archin
Published
2014-08-01
Title
Archin 3.2 - Cross-Site Scripting & Arbitrary File Upload Vulnerabilities
Slug
archin
Published
2014-08-01
Title
Archin 3.2 - hades_framework/option_panel/ajax.php Configuration Option Manipulation
Slug
architecturer
Published
2026-02-25
Title
Architecturer <= 3.8.8 - Reflected Cross-Site Scripting
Slug
archub
Published
2025-08-27
Title
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Slug
area53
Published
2014-08-01
Title
AREA53 <= 1.0.5 - File Upload Code Execution
Slug
arendelle
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
arendelle
Published
2023-07-17
Title
Multiple DeoThemes Themes - Reflected Cross-Site Scripting
Slug
arendelle
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
arendelle
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
aries
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
aries
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
arilewp
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
arkhe
Published
2025-04-11
Title
Arkhe <= 3.12.0 - Local File Inclusion via CSRF
Slug
arlo
Published
2025-06-03
Title
Arlo <= 6.0.3 - Unauthenticated Local File Inclusion
Slug
arlo
Published
2025-12-31
Title
Arlo <= 6.0.3 - Unauthenticated Stored Cross-Site Scripting