WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
bloger
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
blogger-buzz
Published
2025-07-30
Title
Blogger Buzz < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bloggie
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload
Slug
bloggie
Published
2025-05-19
Title
Bloggie <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
Slug
bloghub
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blogistic
Published
2026-01-13
Title
Blogistic <= 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
bloglo
Published
2024-06-06
Title
Bloglo < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blogmarks
Published
2025-08-21
Title
BlogMarks <= 1.0.8 - Unauthenticated Local File Inclusion
Slug
blogmatic
Published
2025-10-15
Title
Blogmatic < 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
blogmine
Published
2025-06-25
Title
Blogmine < 1.1.8 - Unauthenticated Local File Inclusion
Slug
blogpoet
Published
2024-08-29
Title
Blogpoet < 1.0.3 - Missing Authorization via blogpoet_install_and_activate_plugins()
Slug
blogprise
Published
2025-06-25
Title
Blogprise < 1.0.10 - Unauthenticated Local File Inclusion
Slug
blogty
Published
2025-06-25
Title
Blogty < 1.0.12 - Unauthenticated Local File Inclusion
Slug
blogvy
Published
2025-06-25
Title
Blogvy < 1.0.8 - Unauthenticated Local File Inclusion
Slug
blogzee
Published
2026-01-13
Title
Blogzee <= 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
blooog
Published
2014-08-01
Title
Blooog 1.1 - jplayer.swf Cross Site Scripting
Slug
blossom-shop
Published
2024-06-28
Title
Blossom Shop < 1.1.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
blossom-spa
Published
2024-03-12
Title
Blossom Spa < 1.3.5 - Sensitive Information Exposure
Slug
bodycenter
Published
2025-06-09
Title
BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
Slug
boldy
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
boliin
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
bolster
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
bonkers
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
book-landing-page
Published
2024-06-21
Title
Book Landing Page < 1.2.4 - Cross-Site Request Forgery to Notice Dismissal
Slug
bookory
Published
2026-01-01
Title
Bookory < 2.2.8 - Authenticated (Contributor+) Local File Inclusion