WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
bookyourtravel
Published
2024-07-04
Title
Book Your Travel < 8.18.19 - Authenticated (Subscriber+) Privilege Escalation
Slug
boot-store
Published
2024-07-01
Title
Boot Store <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
boot-store
Published
2025-04-28
Title
Boot Store <= 1.6.4 - Reflected Cross-Site Scripting
Slug
bootstrap-blog
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-coach
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-fitness
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-photography
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bootstrap-ultimate
Published
2025-01-23
Title
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
Slug
bordeaux-theme
Published
2014-08-01
Title
Bordeaux - Remote File Upload
Slug
brain-power
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
brand
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
brand
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
brand
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
brandy
Published
2024-12-11
Title
Brand < 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
brasserie
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bravada
Published
2024-08-16
Title
Bravada < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bretheon
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
bretheon
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
bricks
Published
2022-10-03
Title
Bricks Builder < 1.5.4 - Subscriber+ Arbitrary Post/Page Edition
Slug
bricks
Published
2022-10-03
Title
Bricks Builder < 1.5.4 - Subscriber+ Remote Code Execution
Slug
bricks
Published
2024-02-14
Title
Bricks < 1.9.6.1 - Unauthenticated Remote Code Execution
Slug
bricks
Published
2024-02-13
Title
Bricks < 1.9.6.1 - Unauthenticated Remote Code Execution
Slug
bricks
Published
2024-08-16
Title
Bricks < 1.8.2 - Cross-Site Request Forgery via reset_settings
Slug
bricks
Published
2024-08-16
Title
Bricks < 1.8.2 - Cross-Site Request Forgery via save_settings
Slug
bricks
Published
2024-09-13
Title
Bricks < 1.10.2 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting