WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
coaching
Published
2026-07-08
Title
Coaching < 3.9.3 - Unauthenticated Stored Cross-Site Scripting
Slug
coalition
Published
2014-08-01
Title
Coalition - Unspecified XSS
Slug
cobble
Published
2026-02-11
Title
Cobble <= 1.7 - Unauthenticated Local File Inclusion
Slug
cocco
Published
2026-01-01
Title
Cocco <= 1.5.1 - Authenticated (Subscriber+) Authenticated Insecure Direct Object Reference
Slug
cocco
Published
2026-02-25
Title
Cocco - Kids Store and Baby Shop WordPress Theme < 2.0.1 - Unauthenticated Local File Inclusion
Slug
codilight
Published
2014-08-01
Title
Codilight Premium 1.0.0 - admin/front-end/options.php reset Parameter XSS
Slug
codiqa
Published
2025-10-21
Title
Codiqa < 1.2.8 - Unauthenticated PHP Object Injection
Slug
coinpress
Published
2026-03-02
Title
Coinpress <= 1.0.14 - Unauthenticated Local File Inclusion
Slug
coldfusion
Published
2014-08-01
Title
Cold Fusion - Arbitrary File Upload
Slug
coleo
Published
2026-02-27
Title
Coleo <= 1.1.7 - Unauthenticated Local File Inclusion
Slug
colibri-wp
Published
2024-02-22
Title
Colibri WP < 1.0.101 - Cross-Site Request Forgery to Limited Plugin Installation
Slug
colibri-wp
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
college
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
colorbold
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
colorfolio
Published
2026-08-04
Title
ColorFolio - Freelance Designer WordPress <= 1.3 - Authenticated (Subscriber+) PHP Object Injection
Slug
colormag
Published
2024-01-19
Title
ColorMag < 3.1.3 - Missing Authorization to Arbitrary Plugin Installation
Slug
colormag
Published
2024-03-21
Title
ColorMag < 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Slug
colormag
Published
2025-08-19
Title
ColorMag < 4.0.20 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Slug
colormix
Published
2014-08-01
Title
Colormix - Multiple vulnerabilities
Slug
colornews
Published
2024-04-25
Title
ColorNews < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
colorway
Published
2016-07-26
Title
ColorWay < 3.4.2 - Cross-Site Scripting (XSS)
Slug
colorway
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
colorway
Published
2023-02-08
Title
ColorWay <= 4.2.3 - Cross-Site Request Forgery
Slug
colorway
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
compass
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure