WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
g-blog
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gaga-corp
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
gaga-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
gameplan
Published
2024-11-13
Title
Gameplan <= 1.5.10 - Reflected Cross-Site Scripting
Slug
gema-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
genesis
Published
2025-10-24
Title
Open Source Genesis Framework < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
geomagazine
Published
2020-08-17
Title
Geo Magazine <= 2.0 - Unauthenticated Reflected XSS
Slug
geoplaces4
Published
2014-08-01
Title
GeoPlaces - File Upload H&ling Remote Comm& Execution
Slug
geoplaces4beta
Published
2014-08-01
Title
GeoPlaces - File Upload H&ling Remote Comm& Execution
Slug
ghost
Published
2014-08-01
Title
Ghost - Arbitrary File Upload
Slug
ghostwriter
Published
2025-01-18
Title
Ghostwriter <= 1.4 - Reflected Cross-Site Scripting
Slug
givingpress-lite
Published
2024-08-16
Title
GivingPress Lite <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
glamer
Published
2025-08-21
Title
Glamer <= 1.0.2 - Unauthenticated Local File Inclusion
Slug
glossy-blog
Published
2025-04-02
Title
Glossy Blog <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
goldenblatt
Published
2025-09-23
Title
Goldenblatt < 1.3.0 - Unauthenticated PHP Object Injection
Slug
golo
Published
2020-07-15
Title
Golo < 1.3.3 - Unauthenticated Reflected XSS
Slug
golo
Published
2025-03-06
Title
Golo - Directory & Listing, Travel WordPress Theme < 1.6.11 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
Slug
golo
Published
2025-06-02
Title
Golo < 1.7.1 - Authentication Bypass to Account Takeover
Slug
golo
Published
2025-08-26
Title
Golo < 1.7.2 - Reflected Cross-Site Scripting
Slug
goodnews5
Published
2016-02-29
Title
Good News Themes - Reflected Cross-Site Scripting (XSS)
Slug
goodnex
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
gostore
Published
2025-10-15
Title
GoStore < 1.6.4 - Reflected Cross-Site Scripting
Slug
goto
Published
2021-03-31
Title
Goto - Tour & Travel < 2.0 - Unauthenticated Reflected XSS
Slug
goto
Published
2021-04-26
Title
Goto < 2.1 - Unauthenticated Blind SQL Injection
Slug
goto
Published
2021-05-04
Title
Goto < 2.1 - Reflected Cross-Site Scripting (XSS)