WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
eptonic
Published
2013-01-04
Title
Eptonic - Valums Uploader Shell Upload Exploit
Slug
equadio
Published
2026-03-02
Title
Equadio <= 1.1.3 - Unauthenticated Local File Inclusion
Slug
equestrian-centre
Published
2026-03-04
Title
Equestrian Centre <= 1.5 - Unauthenticated PHP Object Injection
Slug
esotera
Published
2024-08-26
Title
Esotera < 1.2.6 - Contributor+ Stored XSS
Slug
esplanade
Published
2015-01-17
Title
Esplanade 1.1.4 - Reflected XSS
Slug
essence
Published
2014-08-01
Title
Essence - Unspecified XSS
Slug
estate
Published
2026-03-04
Title
Estate <= 1.3.4 - Unauthenticated PHP Object Injection
Slug
esteem
Published
2024-06-28
Title
Esteem < 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
estrutura-basica
Published
2015-05-26
Title
Estrutura-Basica - Local File Download
Slug
etchy
Published
2026-03-04
Title
Etchy <= 1.0 - Unauthenticated Local File Inclusion
Slug
etta
Published
2025-09-04
Title
Etta <= 1.14.0 - Unauthenticated Local File Inclusion
Slug
euclid
Published
2014-08-01
Title
Euclid - CSRF
Slug
eunice
Published
2014-08-01
Title
Eunice - Unspecified XSS
Slug
eunoia
Published
2014-08-01
Title
Eunoia - Unspecified XSS
Slug
event
Published
2024-06-06
Title
Theme < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
evently
Published
2026-02-25
Title
Evently <= 1.7 - Unauthenticated Local File Inclusion
Slug
eventpress
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
everest-news
Published
2023-01-25
Title
Everest News <= 1.1.0 - Reflected XSS
Slug
everest-news-pro
Published
2023-08-29
Title
Everest News Pro <= 1.1.7 - Reflected XSS
Slug
everse
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
everse
Published
2023-07-17
Title
Multiple DeoThemes Themes - Reflected Cross-Site Scripting
Slug
everse
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
everse
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
evolve
Published
2011-09-27
Title
Evolve < 1.2.6 - XSS
Slug
excellent
Published
2024-06-17
Title
Excellent < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting