WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
dolcino
Published
2026-02-25
Title
Dolcino - Pastry and Cake Shop WordPress Theme <= 1.6 - Unauthenticated Local File Inclusion
Slug
dom
Published
2026-05-26
Title
Dom <= 1.24 - Unauthenticated Local File Inclusion
Slug
domnoo
Published
2025-06-25
Title
Domnoo < 1.52.1 - Unauthenticated Local File Inclusion
Slug
donpeppe
Published
2026-01-03
Title
Don Peppe <= 1.3 - Missing Authorization
Slug
donpeppe
Published
2026-03-03
Title
Don Peppe - Pizza and Fast Food WordPress Theme <= 1.3 - Unauthenticated Local File Inclusion
Slug
dor
Published
2025-04-17
Title
Dør < 2.4.1 - Unauthenticated Local File Inclusion
Slug
dor
Published
2026-07-02
Title
Dør - Modern Architecture and Interior Design Theme <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Slug
dotlife
Published
2026-01-20
Title
DotLife < 4.9.5 - Reflected Cross-Site Scripting
Slug
dr-patterson
Published
2026-02-26
Title
Dr.Patterson <= 1.3.2 - Unauthenticated Local File Inclusion
Slug
dreamer-blog
Published
2025-12-23
Title
Dreamer Blog <= 1.2 - Subscriber+ Arbitrary Plugin Installation
Slug
dricub-driving-school
Published
2025-09-22
Title
DriCub <= 2.9 - Missing Authorization
Slug
dricub-driving-school
Published
2025-09-22
Title
DriCub <= 2.9 - Unauthenticated Server-Side Request Forgery
Slug
drift
Published
2026-02-18
Title
Drift <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Slug
drone
Published
2026-01-12
Title
Drone <= 1.40 - Reflected Cross-Site Scripting
Slug
drone-media
Published
2026-10-08
Title
Drone Media | Aerial Photography & Videography Theme <= 2.2.0 - Unauthenticated PHP Object Injection
Slug
dronex
Published
2026-03-02
Title
DroneX <= 1.1.12 - Unauthenticated Local File Inclusion
Slug
drop
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
druco
Published
2025-08-02
Title
Druco < 1.5.3 - Reflected Cross-Site Scripting
Slug
dsk
Published
2025-06-11
Title
DSK < 2.4 - Unauthenticated Local File Inclusion
Slug
dt-chocolate
Published
2014-08-01
Title
dt-chocolate - jPlayer XSS
Slug
dt-chocolate
Published
2014-08-01
Title
dt-chocolate - Image Open redirect
Slug
dt-chocolate
Published
2014-08-01
Title
Multiple vulnerabilities in Chocolate WP theme for WordPress
Slug
dt-the7
Published
2015-04-25
Title
The7 Premium Theme < 2.1.1 - Cross-Site Scripting (XSS)
Slug
dt-the7
Published
2023-04-06
Title
The7 < 11.6.1 - Reflected XSS
Slug
dt-the7
Published
2024-06-24
Title
The7 — Website and eCommerce Builder for WordPress < 11.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute