WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
glossy-blog
Published
2025-04-02
Title
Glossy Blog <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
goldenblatt
Published
2025-09-23
Title
Goldenblatt < 1.3.0 - Unauthenticated PHP Object Injection
Slug
golo
Published
2020-07-15
Title
Golo < 1.3.3 - Unauthenticated Reflected XSS
Slug
golo
Published
2025-03-06
Title
Golo - Directory & Listing, Travel WordPress Theme < 1.6.11 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
Slug
golo
Published
2025-06-02
Title
Golo < 1.7.1 - Authentication Bypass to Account Takeover
Slug
golo
Published
2025-08-26
Title
Golo < 1.7.2 - Reflected Cross-Site Scripting
Slug
golo
Published
2026-02-05
Title
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
Slug
golo
Published
2026-02-05
Title
Golo < 1.7.5 - Missing Authorization
Slug
golo
Published
2026-03-12
Title
Golo <= 1.7.0 - Unauthenticated Privilege Escalation
Slug
good-homes
Published
2026-03-05
Title
Good Homes <= 1.3.13 - Unauthenticated Local File Inclusion
Slug
good-mood
Published
2025-09-02
Title
Good Mood <= 1.16 - Unauthenticated Local File Inclusion
Slug
goodenergy
Published
2026-02-26
Title
Good Energy <= 1.7.7 - Unauthenticated PHP Object Injection
Slug
goodnews5
Published
2016-02-29
Title
Good News Themes - Reflected Cross-Site Scripting (XSS)
Slug
goodnex
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
gostore
Published
2025-10-15
Title
GoStore < 1.6.4 - Reflected Cross-Site Scripting
Slug
goto
Published
2021-03-31
Title
Goto - Tour & Travel < 2.0 - Unauthenticated Reflected XSS
Slug
goto
Published
2021-04-26
Title
Goto < 2.1 - Unauthenticated Blind SQL Injection
Slug
goto
Published
2021-05-04
Title
Goto < 2.1 - Reflected Cross-Site Scripting (XSS)
Slug
gotravel
Published
2026-02-25
Title
GoTravel <= 2.1 - Unauthenticated Local File Inclusion
Slug
gowilds
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
goya
Published
2024-06-28
Title
Goya < 1.0.8.8 - Unauthenticated Reflected Cross-Site Scripting via Multiple Parameters
Slug
goza-theme
Published
2025-07-14
Title
Goza - Nonprofit Charity WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Slug
goza-theme
Published
2025-09-08
Title
Goza - Nonprofit Charity WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Slug
grace-mag
Published
2025-04-21
Title
Grace Mag <= 1.1.5 - Unauthenticated Local File Inclusion
Slug
gracioza
Published
2025-09-05
Title
Gracioza <= 1.0.15 - Unauthenticated Local File Inclusion