WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
classiera
Published
2025-07-01
Title
Classiera < 4.0.35 - Unauthenticated SQL Injection
Slug
classified-pro
Published
2025-10-15
Title
Classified Pro < 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
classima
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classipress
Published
2014-08-01
Title
Classipress <= 3.1.4 - Stored XSS
Slug
classter
Published
2026-03-03
Title
Classter <= 2.5 - Unauthenticated PHP Object Injection
Slug
claue
Published
2026-02-24
Title
Claue - Clean, Minimal Elementor WooCommerce <= 2.2.7 - Reflected Cross-Site Scripting
Slug
clean-retina
Published
2024-10-24
Title
Clean Retina < 3.0.7 - Unauthenticated Local File Inclusion
Slug
click-mag
Published
2025-02-11
Title
Click Mag - Viral WordPress News Magazine/Blog Theme < 3.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
Slug
clockstone
Published
2014-08-01
Title
Clockstone <= 1.2 - Arbitrary File Upload
Slug
cloriato-lite
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
clotya
Published
2023-12-07
Title
Multiple Themes by KlbTheme - Cross-Site Request Forgery
Slug
cloudme
Published
2026-02-25
Title
CloudMe | Cloud Storage & File-Sharing WordPress Theme <= 1.2.2 - Unauthenticated Local File Inclusion
Slug
cloudpress
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
club-theme
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
coachify
Published
2024-06-28
Title
Coachify < 1.0.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
coachify
Published
2026-02-08
Title
Coachify < 1.1.6 - Missing Authorization
Slug
coachify
Published
2026-02-08
Title
Coachify < 1.1.6 - Cross-Site Request Forgery
Slug
coalition
Published
2014-08-01
Title
Coalition - Unspecified XSS
Slug
cobble
Published
2026-02-11
Title
Cobble <= 1.7 - Unauthenticated Local File Inclusion
Slug
cocco
Published
2026-01-01
Title
Cocco <= 1.5.1 - Authenticated (Subscriber+) Authenticated Insecure Direct Object Reference
Slug
cocco
Published
2026-02-25
Title
Cocco - Kids Store and Baby Shop WordPress Theme < 2.0.1 - Unauthenticated Local File Inclusion
Slug
codilight
Published
2014-08-01
Title
Codilight Premium 1.0.0 - admin/front-end/options.php reset Parameter XSS
Slug
codiqa
Published
2025-10-21
Title
Codiqa < 1.2.8 - Unauthenticated PHP Object Injection
Slug
coinpress
Published
2026-03-02
Title
Coinpress <= 1.0.14 - Unauthenticated Local File Inclusion
Slug
coldfusion
Published
2014-08-01
Title
Cold Fusion - Arbitrary File Upload