WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
doko
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
domnoo
Published
2025-06-25
Title
Domnoo <= 1.49 - Unauthenticated Local File Inclusion
Slug
dor
Published
2025-04-17
Title
Dør < 2.4.1 - Unauthenticated Local File Inclusion
Slug
dricub-driving-school
Published
2025-09-22
Title
DriCub <= 2.9 - Missing Authorization
Slug
dricub-driving-school
Published
2025-09-22
Title
DriCub <= 2.9 - Unauthenticated Server-Side Request Forgery
Slug
drop
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
druco
Published
2025-08-02
Title
Druco < 1.5.3 - Reflected Cross-Site Scripting
Slug
dsk
Published
2025-06-11
Title
DSK <= 2.2 - Unauthenticated Local File Inclusion
Slug
dt-chocolate
Published
2014-08-01
Title
dt-chocolate - jPlayer XSS
Slug
dt-chocolate
Published
2014-08-01
Title
dt-chocolate - Image Open redirect
Slug
dt-chocolate
Published
2014-08-01
Title
Multiple vulnerabilities in Chocolate WP theme for WordPress
Slug
dt-the7
Published
2015-04-25
Title
The7 Premium Theme < 2.1.1 - Cross-Site Scripting (XSS)
Slug
dt-the7
Published
2023-04-06
Title
The7 < 11.6.1 - Reflected XSS
Slug
dt-the7
Published
2024-06-24
Title
The7 — Website and eCommerce Builder for WordPress < 11.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Slug
dt-the7
Published
2025-08-09
Title
The7 < 12.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes
Slug
dt-the7
Published
2025-10-24
Title
The7 — Ultimate WordPress & WooCommerce Theme < 12.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css'
Slug
dt-the7
Published
2025-10-04
Title
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
dt-the7
Published
2025-10-05
Title
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dwt-listing
Published
2025-01-15
Title
DWT - Directory & Listing WordPress Theme < 3.3.4 - Reflected Cross-Site Scripting
Slug
dwt-listing
Published
2025-02-08
Title
DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dwt-listing
Published
2025-06-26
Title
DWT < 3.3.7 - Unauthenticated Arbitrary User Password Reset
Slug
dzonia-lite
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure