WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
eros
Published
2026-05-27
Title
Eros <= 1.3 - Unauthenticated Local File Inclusion
Slug
escortwp
Published
2026-06-19
Title
EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor
Slug
esme
Published
2026-04-20
Title
Esmée < 1.5 - Unauthenticated PHP Object Injection
Slug
esotera
Published
2024-08-26
Title
Esotera < 1.2.6 - Contributor+ Stored XSS
Slug
especio
Published
2026-05-26
Title
Especio - Food Blog Elementor Pro Template Kit <= 1.0 - Unauthenticated Local File Inclusion
Slug
esplanade
Published
2015-01-17
Title
Esplanade 1.1.4 - Reflected XSS
Slug
essence
Published
2014-08-01
Title
Essence - Unspecified XSS
Slug
estate
Published
2026-03-04
Title
Estate <= 1.3.4 - Unauthenticated PHP Object Injection
Slug
esteem
Published
2024-06-28
Title
Esteem < 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
estore
Published
2026-10-16
Title
eStore < 1.6.14 - Reflected Cross-Site Scripting
Slug
estrutura-basica
Published
2015-05-26
Title
Estrutura-Basica - Local File Download
Slug
etchy
Published
2026-03-04
Title
Etchy <= 1.0 - Unauthenticated Local File Inclusion
Slug
etta
Published
2025-09-04
Title
Etta <= 1.14.0 - Unauthenticated Local File Inclusion
Slug
etude
Published
2026-05-27
Title
Etude <= 1.6 - Unauthenticated Local File Inclusion
Slug
euclid
Published
2014-08-01
Title
Euclid - CSRF
Slug
eunice
Published
2014-08-01
Title
Eunice - Unspecified XSS
Slug
eunoia
Published
2014-08-01
Title
Eunoia - Unspecified XSS
Slug
event
Published
2024-06-06
Title
Theme < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventicity
Published
2026-05-27
Title
Eventicity <= 1.5 - Unauthenticated Local File Inclusion
Slug
evently
Published
2026-02-25
Title
Evently <= 1.7 - Unauthenticated Local File Inclusion
Slug
eventpress
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
eventpress
Published
2026-05-06
Title
EventPress < 22.2 – Reflected Cross-Site Scripting
Slug
everest-news
Published
2023-01-25
Title
Everest News <= 1.1.0 - Reflected XSS
Slug
everest-news-pro
Published
2023-08-29
Title
Everest News Pro <= 1.1.7 - Reflected XSS
Slug
everse
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius