WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
dermatology-clinic
Published
2026-02-27
Title
Dermatology Clinic <= 1.4.3 - Unauthenticated Local File Inclusion
Slug
design-comuni-wordpress-theme
Published
2025-03-04
Title
Design Comuni Italia < 1.1.2 - Unauthenticated Stored XSS
Slug
designexo
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
designfolio-plus
Published
2015-03-04
Title
DesignFolio Plus Theme <= 1.2 - Arbitrary File Upload
Slug
designpile
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
dessau
Published
2025-04-17
Title
Dessau < 1.9 - Unauthenticated Local File Inclusion
Slug
deston
Published
2026-03-10
Title
Deston <= 1.0 - Unauthenticated Local File Inclusion
Slug
detailx
Published
2025-08-19
Title
DetailX <= 1.10.0 - Unauthenticated Local File Inclusion
Slug
diamond
Published
2026-02-11
Title
Diamond <= 2.4.8 - Reflected Cross-Site Scripting
Slug
diary
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
digi-store
Published
2025-01-03
Title
Digi Store <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
digiqole
Published
2025-12-13
Title
Digiqole < 2.2.7 - Authenticated (Contributor+) Local File Inclusion
Slug
digital-newspaper
Published
2024-06-20
Title
Digital Newspaper < 1.1.6 - Cross-Site Request Forgery to Notice Dismissal
Slug
digital-store
Published
2015-04-20
Title
Digital Store < 1.3.3 - Unspecified XSS
Slug
digitally
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
digitally
Published
2024-10-15
Title
Digitally <= 1.0.8 - Reflected Cross-Site Scripting
Slug
dignitas-themes
Published
2015-03-04
Title
Dignitas 1.1.9 - Privilage Escalation
Slug
dimension
Published
2014-08-01
Title
Dimension - CSRF
Slug
diplomat
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
directory
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
disconnected
Published
2024-10-14
Title
Disconnected <= 1.3.0 - Reflected Cross-Site Scripting
Slug
discy
Published
2022-05-16
Title
Discy < 5.2 - Settings Update via CSRF
Slug
discy
Published
2022-05-16
Title
Discy < 5.2 - Restore Default Settings via CSRF
Slug
discy
Published
2022-07-12
Title
Discy < 5.0 - Subscriber+ Broken Access Control to change settings
Slug
discy
Published
2022-12-13
Title
WPQA < 5.9.3 - Missing validation lead to functionality abuse