WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
bimber
Published
2025-05-13
Title
Bimber - Viral Magazine WordPress Theme <= 9.2.5 - Authenticated (Contributor+) Local File Inclusion
Slug
bingle
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
bingopress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
biolife
Published
2026-02-11
Title
Biolife <= 3.2.3 - Missing Authorization
Slug
biolife
Published
2026-02-11
Title
Biolife <= 3.2.3 - Authenticated (Contributor+) Local File Inclusion
Slug
biolife
Published
2026-10-07
Title
Biolife - Organic Food WordPress Theme ( RTL Supported ) <= 3.2.3 - Unauthenticated Local File Inclusion
Slug
biolife
Published
2026-10-07
Title
Biolife - Organic Food WordPress Theme ( RTL Supported ) <= 3.2.3 - Reflected Cross-Site Scripting
Slug
bizpress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blabber
Published
2026-02-17
Title
Blabber <= 1.7.0 - Unauthenticated Local File Inclusion
Slug
black-letterhead
Published
2011-09-27
Title
Black Letterhead < 1.6 - XSS
Slug
blackfyre
Published
2026-02-14
Title
Blackfyre <= 2.5.4 - Cross-Site Request Forgery
Slug
blain
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
blanka-wp
Published
2025-08-26
Title
Blanka - One Page WordPress < 1.5 - Unauthenticated Local File Inclusion
Slug
blaze
Published
2014-08-01
Title
Blaze - Unspecified XSS
Slug
blessing
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
blockbooster
Published
2024-08-28
Title
Blockbooster < 1.0.11 - Missing Authorization
Slug
blockst
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blocksy
Published
2024-02-05
Title
Blocksy < 2.0.20 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2024-03-08
Title
Blocksy < 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2024-04-24
Title
Blocksy < 2.0.40 - Contributor+ Stored Cross-Site Scripting
Slug
blocksy
Published
2024-04-23
Title
Blocksy < 2.0.34 - Contributor+ Stored XSS
Slug
blocksy
Published
2024-05-03
Title
Blocksy < 2.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2024-05-20
Title
Blocksy < 2.0.47 - Contributor+ Stored XSS
Slug
blocksy
Published
2024-06-04
Title
Blocksy < 2.0.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocksy
Published
2024-12-04
Title
Blocksy < 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting