WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
carzine
Published
2025-01-18
Title
CarZine <= 1.4.6 - Reflected Cross-Site Scripting
Slug
cas
Published
2024-05-02
Title
CAS <= 1.0.0 - Unauthenticated Arbitrary File Access
Slug
cas
Published
2024-05-02
Title
CAS <= 1.0.0 - Unauthenticated SSRF
Slug
catch-base
Published
2024-09-25
Title
Catch Base < 3.4.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
caulk
Published
2014-08-01
Title
Caulk - path disclosure
Slug
celestial-aura
Published
2025-04-14
Title
Celestial Aura <= 2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
cena
Published
2025-07-23
Title
Cena Store < 2.11.27 - Unauthenticated Local File Inclusion
Slug
chained
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chameleon
Published
2013-11-02
Title
Chameleon - Arbitrary File Upload
Slug
chaostheory
Published
2024-05-17
Title
ChaosTheory < 1.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
chic-lifestyle
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chic-lite
Published
2024-06-20
Title
Chic Lite < 1.1.4 - Cross-Site Request Forgery to Notice Dismissal
Slug
choices
Published
2014-08-01
Title
Choices - Unspecified XSS
Slug
churchope
Published
2014-12-07
Title
ChurcHope Theme <= 2.1 - Local File Inclusion (LFI)
Slug
churel
Published
2025-03-28
Title
Churel <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
city-store
Published
2025-03-24
Title
City Store <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
citybook
Published
2020-01-09
Title
CityBook < 2.3.4 - Multiple Vulnerabilities
Slug
citybook
Published
2020-06-19
Title
CityBook < 2.4.4 - Unauthenticated Reflected XSS
Slug
citygov
Published
2025-06-25
Title
CityGov <= 1.9 - Unauthenticated Local File Inclusion
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Authentication Bypass via Password Update
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Sensitive Information Exposure
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Authentication Bypass via Non-Randomized Password for SSO Accounts
Slug
ciyashop
Published
2025-03-13
Title
CiyaShop - Multipurpose WooCommerce Theme < 4.19.1 - Unauthenticated PHP Object Injection
Slug
ciyashop
Published
2025-04-21
Title
CiyaShop <= 4.18.0 - Unauthenticated PHP Object Injection
Slug
clanora
Published
2025-09-01
Title
Clanora < 1.3.1 - Unauthenticated Arbitrary File Upload