WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
bricks
Published
2022-10-03
Title
Bricks Builder < 1.5.4 - Subscriber+ Remote Code Execution
Slug
bricks
Published
2024-02-14
Title
Bricks < 1.9.6.1 - Unauthenticated Remote Code Execution
Slug
bricks
Published
2024-02-13
Title
Bricks < 1.9.6.1 - Unauthenticated Remote Code Execution
Slug
bricks
Published
2024-08-16
Title
Bricks < 1.8.2 - Cross-Site Request Forgery via reset_settings
Slug
bricks
Published
2024-08-16
Title
Bricks < 1.8.2 - Cross-Site Request Forgery via save_settings
Slug
bricks
Published
2024-09-13
Title
Bricks < 1.10.2 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting
Slug
bricks
Published
2025-02-26
Title
Bricksbuilder < 1.9.7 - Authenticated (Contributor+) Privilege Escalation via create_autosave
Slug
bricks
Published
2025-07-28
Title
Bricks Builder < 2.0 - Unauthenticated SQL Injection via `p` Parameter
Slug
bricks
Published
2025-07-28
Title
Bricks Builder < 2.0 - Unauthenticated SQL Injection via `p` Parameter
Slug
bricks
Published
2026-04-23
Title
Bricks < 2.3 - Reflected Cross-Site Scripting
Slug
bridge
Published
2017-08-08
Title
Bridge Theme <= 11.1 - DOM Cross-Site Scripting (XSS)
Slug
bridge
Published
2019-10-21
Title
Bridge Theme < 18.2.1 - Open Redirect
Slug
brightbox
Published
2014-08-01
Title
Brightbox - Unspecified XSS
Slug
brikk
Published
2026-05-26
Title
Brikk <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
brilliance
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
brilliance
Published
2023-03-13
Title
Brilliance <= 1.3.1 - Subscriber+ Stored XSS
Slug
brisk
Published
2014-08-01
Title
Brisk - Unspecified XSS
Slug
brite
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
broadcast-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
broadcast-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
broadscope
Published
2014-08-01
Title
Broadscope - Unspecified XSS
Slug
brook
Published
2026-01-07
Title
Brook <= 2.9.0 - Unauthenticated Local File Inclusion
Slug
brook
Published
2026-07-02
Title
Brook - Agency Business Creative WordPress Theme <= 2.9.0 - Authenticated (Contributor+) Local File Inclusion
Slug
brooklyn
Published
2024-02-09
Title
Brooklyn <= 4.9.7.6 - PHP Object Injection
Slug
brooklyn
Published
2024-02-09
Title
Brooklyn <= 4.9.7.6 - Reflected Cross-Site Scripting