WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
finance
Published
2025-05-21
Title
Finance Consultant <= 2.8 - Authenticated (Subscriber+) PHP Object Injection
Slug
financio
Published
2024-04-25
Title
Financio < 1.1.4 - Cross-Site Request Forgery to Notice Dismissal
Slug
findall
Published
2026-03-04
Title
FindAll - Business Directory WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
Slug
findeo
Published
2021-03-31
Title
Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
findeo
Published
2021-03-31
Title
Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR
Slug
findgo
Published
2020-07-13
Title
Findgo - Directory Listing < 1.3.32 - Unauthenticated Reflected and Authenticated Stored XSS
Slug
findgo
Published
2025-08-14
Title
Findgo < 1.3.58 - Cross-Site Request Forgery
Slug
findus
Published
2020-07-13
Title
Findus - Directory Listing < 1.1.15 - Authenticated Persistent XSS
Slug
fingo
Published
2025-09-22
Title
Findgo < 1.3.60.1 - Cross-Site Request Forgery
Slug
fiorello
Published
2026-01-01
Title
Fiorello <= 1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
fiorello
Published
2026-02-25
Title
Fiorello - Florist and Flower Shop WordPress Theme <= 1.0 - Unauthenticated Local File Inclusion
Slug
fioxen
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
fire-blog
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fish-house
Published
2025-05-21
Title
Fish House <= 1.2.7 - Unauthenticated PHP Object Injection
Slug
fitflex
Published
2025-08-22
Title
FitFlex <= 1.6 - Unauthenticated Local File Inclusion
Slug
fitline
Published
2025-09-02
Title
FitLine <= 1.6 - Unauthenticated Local File Inclusion
Slug
fitness-fse
Published
2026-01-30
Title
Fitness FSE <= 1.0.6 - Missing Authorization
Slug
fitness-park
Published
2025-06-19
Title
Fitness Park <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fivestar
Published
2025-12-29
Title
FiveStar <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
fivestar
Published
2026-02-11
Title
FiveStar <= 1.7 - Unauthenticated Local File Inclusion
Slug
fixteam
Published
2026-02-25
Title
FixTeam | Electronics & Mobile Devices Repair WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
Slug
flap
Published
2025-06-03
Title
FLAP - Business WordPress Theme <= 1.5 - Unauthenticated PHP Object Injection
Slug
flashlight
Published
2014-08-01
Title
Flashlight - Unspecified XSS
Slug
flashnews
Published
2014-08-01
Title
Flash News - Multiple Vulnerabilities
Slug
flashy
Published
2015-03-26
Title
Flashy Theme <= 1.3 - Cross-Site Scripting (XSS)