WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
childhope
Published
2025-09-04
Title
ChildHope <= 1.1.8 - Unauthenticated Local File Inclusion
Slug
chinchilla
Published
2025-08-23
Title
Chinchilla <= 1.16 - Unauthenticated Local File Inclusion
Slug
choices
Published
2014-08-01
Title
Choices - Unspecified XSS
Slug
christine-miller
Published
2026-02-27
Title
Miller <= 1.3.3 - Unauthenticated Local File Inclusion
Slug
chroma
Published
2026-03-02
Title
Chroma <= 1.11 - Unauthenticated Local File Inclusion
Slug
chronicle
Published
2026-02-25
Title
Chronicle <= 1.0 - Unauthenticated Local File Inclusion
Slug
churchope
Published
2014-12-07
Title
ChurcHope Theme <= 2.1 - Local File Inclusion (LFI)
Slug
churel
Published
2025-03-28
Title
Churel <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cinerama
Published
2025-12-20
Title
Cinerama - A WordPress Theme for Movie Studios and Filmmakers <= 2.4 - Authenticated (Contributor+) Local File Inclusion
Slug
city-store
Published
2025-03-24
Title
City Store <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
citybook
Published
2020-01-09
Title
CityBook < 2.3.4 - Multiple Vulnerabilities
Slug
citybook
Published
2020-06-19
Title
CityBook < 2.4.4 - Unauthenticated Reflected XSS
Slug
citygov
Published
2025-06-25
Title
CityGov <= 1.9 - Unauthenticated Local File Inclusion
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Authentication Bypass via Password Update
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Sensitive Information Exposure
Slug
civi
Published
2025-03-13
Title
Civi <= 2.1.4 - Authentication Bypass via Non-Randomized Password for SSO Accounts
Slug
ciyashop
Published
2025-03-13
Title
CiyaShop - Multipurpose WooCommerce Theme < 4.19.1 - Unauthenticated PHP Object Injection
Slug
ciyashop
Published
2025-04-21
Title
CiyaShop <= 4.18.0 - Unauthenticated PHP Object Injection
Slug
clanora
Published
2025-09-01
Title
Clanora < 1.3.1 - Unauthenticated Arbitrary File Upload
Slug
classic
Published
2014-08-01
Title
Classic 1.5 - PHP_SELF XSS
Slug
classiera
Published
2025-07-01
Title
Classiera < 4.0.35 - Unauthenticated SQL Injection
Slug
classified-pro
Published
2025-10-15
Title
Classified Pro < 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
classima
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classipress
Published
2014-08-01
Title
Classipress <= 3.1.4 - Stored XSS
Slug
classter
Published
2026-03-03
Title
Classter <= 2.5 - Unauthenticated PHP Object Injection