WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
classic
Published
2014-08-01
Title
Classic 1.5 - PHP_SELF XSS
Slug
classiera
Published
2025-07-01
Title
Classiera < 4.0.35 - Unauthenticated SQL Injection
Slug
classified-pro
Published
2025-10-15
Title
Classified Pro < 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
classima
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classipress
Published
2014-08-01
Title
Classipress <= 3.1.4 - Stored XSS
Slug
clean-retina
Published
2024-10-24
Title
Clean Retina < 3.0.7 - Unauthenticated Local File Inclusion
Slug
click-mag
Published
2025-02-11
Title
Click Mag - Viral WordPress News Magazine/Blog Theme < 3.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
Slug
clockstone
Published
2014-08-01
Title
Clockstone <= 1.2 - Arbitrary File Upload
Slug
cloriato-lite
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
clotya
Published
2023-12-07
Title
Multiple Themes by KlbTheme - Cross-Site Request Forgery
Slug
cloudpress
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
club-theme
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
coachify
Published
2024-06-28
Title
Coachify < 1.0.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
coalition
Published
2014-08-01
Title
Coalition - Unspecified XSS
Slug
codilight
Published
2014-08-01
Title
Codilight Premium 1.0.0 - admin/front-end/options.php reset Parameter XSS
Slug
coldfusion
Published
2014-08-01
Title
Cold Fusion - Arbitrary File Upload
Slug
colibri-wp
Published
2024-02-22
Title
Colibri WP < 1.0.101 - Cross-Site Request Forgery to Limited Plugin Installation
Slug
colibri-wp
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
college
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
colorbold
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
colormag
Published
2024-01-19
Title
ColorMag < 3.1.3 - Missing Authorization to Arbitrary Plugin Installation
Slug
colormag
Published
2024-03-21
Title
ColorMag < 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Slug
colormag
Published
2025-08-19
Title
ColorMag < 4.0.20 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Slug
colormix
Published
2014-08-01
Title
Colormix - Multiple vulnerabilities
Slug
colornews
Published
2024-04-25
Title
ColorNews < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting