WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
dagda
Published
2014-08-01
Title
dagda - Arbitrary File Upload
Slug
dagda
Published
2014-08-01
Title
dagda - Custom Background Shell Upload
Slug
dailydeal
Published
2014-08-01
Title
DailyDeal - File Upload Remote Code Execution
Slug
dailydeal
Published
2014-08-01
Title
Dailydeal by Templatic - CSRF File Upload
Slug
dailyedition
Published
2015-03-07
Title
WooThemes Daily Edition <= 1.6.2 - SQL Injection
Slug
dailyedition
Published
2015-03-07
Title
WooThemes Daily Edition <= 1.6.2 - Unrestricted File Upload
Slug
dailyedition
Published
2015-03-10
Title
WooThemes Daily Edition <= 1.6.2 - Cross-Site Scripting (XSS)
Slug
daisho
Published
2014-08-01
Title
Daisho - Unspecified XSS
Slug
dandelion
Published
2014-08-01
Title
D&elion - Arbitry File Upload
Slug
darcie
Published
2023-02-27
Title
Darcie < 1.1.6 - Reflected XSS
Slug
dash
Published
2025-05-19
Title
Dash <= 1.3 - Unauthenticated PHP Object Injection
Slug
deadline
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
deep-blue
Published
2014-08-01
Title
Deep-Blue 1.9.2 - Arbitrary File Upload
Slug
dejavu
Published
2014-08-01
Title
DejaVu 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Slug
dejavu
Published
2014-08-01
Title
DejaVu 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Slug
delicate
Published
2024-09-12
Title
Delicate <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
denticare
Published
2025-09-23
Title
DentiCare < 1.4.3 - Unauthenticated PHP Object Injection
Slug
design-comuni-wordpress-theme
Published
2025-03-04
Title
Design Comuni Italia < 1.1.2 - Unauthenticated Stored XSS
Slug
designexo
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
designfolio-plus
Published
2015-03-04
Title
DesignFolio Plus Theme <= 1.2 - Arbitrary File Upload
Slug
designpile
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
dessau
Published
2025-04-17
Title
Dessau < 1.9 - Unauthenticated Local File Inclusion
Slug
diary
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
digi-store
Published
2025-01-03
Title
Digi Store <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
digital-newspaper
Published
2024-06-20
Title
Digital Newspaper < 1.1.6 - Cross-Site Request Forgery to Notice Dismissal