WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
gowilds
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
goya
Published
2024-06-28
Title
Goya < 1.0.8.8 - Unauthenticated Reflected Cross-Site Scripting via Multiple Parameters
Slug
goza-theme
Published
2025-07-14
Title
Goza - Nonprofit Charity WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Slug
goza-theme
Published
2025-09-08
Title
Goza - Nonprofit Charity WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Slug
grace-mag
Published
2025-04-21
Title
Grace Mag <= 1.1.5 - Unauthenticated Local File Inclusion
Slug
grandprix
Published
2025-06-09
Title
GrandPrix < 1.6.1 - Unauthenticated Local File Inclusion
Slug
grandrestaurant
Published
2025-04-18
Title
Grand Restaurant WordPress <= 7.0 - Missing Authorization
Slug
grandrestaurant
Published
2025-04-18
Title
Grand Restaurant WordPress <= 7.0 - Cross-Site Request Forgery
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection via Path Traversal
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Missing Authorization to Unauthenticated Arbitrary Options Deletion
Slug
grandrestaurant
Published
2025-04-21
Title
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection
Slug
grandtour
Published
2025-05-20
Title
Grand Tour | Travel Agency WordPress <= 5.5.1 - Unauthenticated PHP Object Injection
Slug
graphene
Published
2024-03-19
Title
Graphene < 2.9.3 - Unauthenticated Password Protected Post Access
Slug
gravel
Published
2025-04-02
Title
Gravel <= 1.6 - Reflected Cross-Site Scripting
Slug
greenify
Published
2025-09-28
Title
Greenify < 2.3 - Unauthenticated Local File Inclusion
Slug
greenmart
Published
2020-10-28
Title
Greenmart < 2.4.3 - Reflected Cross-Site Scripting (XSS)
Slug
greenmart
Published
2020-10-29
Title
Greenmart < 2.5.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
greenmart
Published
2025-06-25
Title
Greenmart < 4.2.4 - Unauthenticated Local File Inclusion
Slug
grevo
Published
2025-10-09
Title
Grevo < 2.5 - Unauthenticated Local File Inclusion
Slug
grey-opaque
Published
2024-06-21
Title
Grey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode
Slug
greyd_suite
Published
2022-07-21
Title
GREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCE
Slug
grillandchow
Published
2025-06-09
Title
Grill and Chow < 1.6.1 - Unauthenticated Local File Inclusion
Slug
grip
Published
2025-04-14
Title
Grip <= 1.0.9 - Unauthenticated Local File Inclusion
Slug
gucherry-blog
Published
2024-04-15
Title
GuCherry Blog <= 1.1.8 - Reflected Cross-Site Scripting
Slug
gump
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting