WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
dagda
Published
2014-08-01
Title
dagda - Arbitrary File Upload
Slug
dagda
Published
2014-08-01
Title
dagda - Custom Background Shell Upload
Slug
dailydeal
Published
2014-08-01
Title
DailyDeal - File Upload Remote Code Execution
Slug
dailydeal
Published
2014-08-01
Title
Dailydeal by Templatic - CSRF File Upload
Slug
dailyedition
Published
2015-03-07
Title
WooThemes Daily Edition <= 1.6.2 - SQL Injection
Slug
dailyedition
Published
2015-03-07
Title
WooThemes Daily Edition <= 1.6.2 - Unrestricted File Upload
Slug
dailyedition
Published
2015-03-10
Title
WooThemes Daily Edition <= 1.6.2 - Cross-Site Scripting (XSS)
Slug
daiquiri
Published
2026-02-27
Title
Daiquiri <= 1.2.4 - Unauthenticated Local File Inclusion
Slug
daisho
Published
2014-08-01
Title
Daisho - Unspecified XSS
Slug
dandelion
Published
2014-08-01
Title
D&elion - Arbitry File Upload
Slug
darcie
Published
2023-02-27
Title
Darcie < 1.1.6 - Reflected XSS
Slug
dash
Published
2025-05-19
Title
Dash <= 1.3 - Unauthenticated PHP Object Injection
Slug
deadline
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
deep-blue
Published
2014-08-01
Title
Deep-Blue 1.9.2 - Arbitrary File Upload
Slug
deepdigital
Published
2026-01-05
Title
DeepDigital <= 1.0.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
deepdigital
Published
2026-03-04
Title
DeepDigital – Web Design Agency WordPress Theme <= 1.0.2 - Reflected Cross-Site Scripting
Slug
dejavu
Published
2014-08-01
Title
DejaVu 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Slug
dejavu
Published
2014-08-01
Title
DejaVu 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Slug
dekoro
Published
2025-12-30
Title
Dekoro <= 1.0.7 - Unauthenticated Local File Inclusion
Slug
delicate
Published
2024-09-12
Title
Delicate <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
dental
Published
2026-03-04
Title
Dental Clinic <= 3.7 - Authenticated (Subscriber+) PHP Object Injection
Slug
dentalux
Published
2026-03-05
Title
Dentalux | Dentist & Healthcare Site Template <= 3.3 - Unauthenticated Local File Inclusion
Slug
dentario
Published
2026-02-23
Title
Dentario <= 1.5 - Unauthenticated PHP Object Injection
Slug
denticare
Published
2025-09-23
Title
DentiCare < 1.4.3 - Unauthenticated PHP Object Injection
Slug
depot
Published
2026-01-08
Title
Depot <= 1.16 - Unauthenticated Local File Inclusion