WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
bricks
Published
2024-09-13
Title
Bricks < 1.10.2 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting
Slug
bricks
Published
2025-02-26
Title
Bricksbuilder < 1.9.7 - Authenticated (Contributor+) Privilege Escalation via create_autosave
Slug
bricks
Published
2025-07-28
Title
Bricks Builder < 2.0 - Unauthenticated SQL Injection via `p` Parameter
Slug
bricks
Published
2025-07-28
Title
Bricks Builder < 2.0 - Unauthenticated SQL Injection via `p` Parameter
Slug
bricks
Published
2026-04-23
Title
Bricks < 2.3 - Reflected Cross-Site Scripting
Slug
bridge
Published
2017-08-08
Title
Bridge Theme <= 11.1 - DOM Cross-Site Scripting (XSS)
Slug
bridge
Published
2019-10-21
Title
Bridge Theme < 18.2.1 - Open Redirect
Slug
brightbox
Published
2014-08-01
Title
Brightbox - Unspecified XSS
Slug
brikk
Published
2026-05-26
Title
Brikk <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
brilliance
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
brilliance
Published
2023-03-13
Title
Brilliance <= 1.3.1 - Subscriber+ Stored XSS
Slug
brisk
Published
2014-08-01
Title
Brisk - Unspecified XSS
Slug
brite
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
broadcast-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
broadcast-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
broadscope
Published
2014-08-01
Title
Broadscope - Unspecified XSS
Slug
brook
Published
2026-01-07
Title
Brook <= 2.9.0 - Unauthenticated Local File Inclusion
Slug
brooklyn
Published
2024-02-09
Title
Brooklyn <= 4.9.7.6 - PHP Object Injection
Slug
brooklyn
Published
2024-02-09
Title
Brooklyn <= 4.9.7.6 - Reflected Cross-Site Scripting
Slug
brooklyn
Published
2025-02-17
Title
Brooklyn Theme < 4.9.9.3 - Authenticated (Subscriber+) PHP Object Injection in ot_decode
Slug
brookside
Published
2026-01-13
Title
Brookside <= 1.4 - Reflected Cross-Site Scripting
Slug
buddyapp
Published
2026-03-03
Title
BuddyApp <= 1.9.2 - Reflected Cross-Site Scripting
Slug
buddyboss-platform
Published
2024-05-15
Title
BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR
Slug
buddyboss-theme
Published
2023-12-27
Title
BuddyBoss Theme < 2.4.61 - Missing Authorization
Slug
buddyboss-theme
Published
2024-07-09
Title
BuddyBoss Theme < 2.5.01 - Cross-Site Request Forgery