WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
blogpoet
Published
2024-08-29
Title
Blogpoet < 1.0.3 - Missing Authorization via blogpoet_install_and_activate_plugins()
Slug
blogprise
Published
2025-06-25
Title
Blogprise < 1.0.10 - Unauthenticated Local File Inclusion
Slug
blogty
Published
2025-06-25
Title
Blogty < 1.0.12 - Unauthenticated Local File Inclusion
Slug
blogvy
Published
2025-06-25
Title
Blogvy < 1.0.8 - Unauthenticated Local File Inclusion
Slug
blooog
Published
2014-08-01
Title
Blooog 1.1 - jplayer.swf Cross Site Scripting
Slug
blossom-shop
Published
2024-06-28
Title
Blossom Shop < 1.1.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
blossom-spa
Published
2024-03-12
Title
Blossom Spa < 1.3.5 - Sensitive Information Exposure
Slug
bodycenter
Published
2025-06-09
Title
BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
Slug
boldy
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
boliin
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
bolster
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
bonkers
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
book-landing-page
Published
2024-06-21
Title
Book Landing Page < 1.2.4 - Cross-Site Request Forgery to Notice Dismissal
Slug
bookyourtravel
Published
2024-07-04
Title
Book Your Travel < 8.18.19 - Authenticated (Subscriber+) Privilege Escalation
Slug
boot-store
Published
2024-07-01
Title
Boot Store <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
boot-store
Published
2025-04-28
Title
Boot Store <= 1.6.4 - Reflected Cross-Site Scripting
Slug
bootstrap-blog
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-coach
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-fitness
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-photography
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-ultimate
Published
2025-01-23
Title
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
Slug
bordeaux-theme
Published
2014-08-01
Title
Bordeaux - Remote File Upload
Slug
brain-power
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
brand
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
brand
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update