WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
envo-multipurpose
Published
2025-01-14
Title
Envo Multipurpose <= 1.1.6 - Missing Authorization
Slug
enzio
Published
2025-05-21
Title
Enzio - Responsive Business WordPress Theme <= 1.1.8 - Unauthenticated Local File Inclusion
Slug
enzy
Published
2025-10-11
Title
Enzy < 1.6.4 - Reflected Cross-Site Scripting
Slug
epic
Published
2016-03-03
Title
epic Theme - Arbitrary File Download
Slug
eptonic
Published
2013-01-04
Title
Eptonic - Valums Uploader Shell Upload Exploit
Slug
esotera
Published
2024-08-26
Title
Esotera < 1.2.6 - Contributor+ Stored XSS
Slug
esplanade
Published
2015-01-17
Title
Esplanade 1.1.4 - Reflected XSS
Slug
essence
Published
2014-08-01
Title
Essence - Unspecified XSS
Slug
esteem
Published
2024-06-28
Title
Esteem < 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
estrutura-basica
Published
2015-05-26
Title
Estrutura-Basica - Local File Download
Slug
euclid
Published
2014-08-01
Title
Euclid - CSRF
Slug
eunice
Published
2014-08-01
Title
Eunice - Unspecified XSS
Slug
eunoia
Published
2014-08-01
Title
Eunoia - Unspecified XSS
Slug
event
Published
2024-06-06
Title
Theme < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventpress
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
everest-news
Published
2023-01-25
Title
Everest News <= 1.1.0 - Reflected XSS
Slug
everest-news-pro
Published
2023-08-29
Title
Everest News Pro <= 1.1.7 - Reflected XSS
Slug
everse
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
everse
Published
2023-07-17
Title
Multiple DeoThemes Themes - Reflected Cross-Site Scripting
Slug
everse
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
everse
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
evolve
Published
2011-09-27
Title
Evolve < 1.2.6 - XSS
Slug
excellent
Published
2024-06-17
Title
Excellent < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
exertio
Published
2025-07-31
Title
Exertio < 1.3.3 - Unauthenticated PHP Object Injection
Slug
eximious-magazine
Published
2025-08-21
Title
Magazine <= 1.2.2 - Unauthenticated Local File Inclusion