WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
hostmev2
Published
2026-10-21
Title
Hostme v2 - Responsive WordPress Theme <= 7.0 - Unauthenticated Stored Cross-Site Scripting
Slug
hot-coffee
Published
2026-05-26
Title
Hot Coffee <= 1.7 - Unauthenticated PHP Object Injection
Slug
hotel-galaxy
Published
2024-08-29
Title
Hotel Galaxy <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hotelica
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hoteller
Published
2026-01-20
Title
Hoteller < 6.8.9 - Reflected Cross-Site Scripting
Slug
hotlock
Published
2026-10-21
Title
HotLock | Locksmith & Security Systems WordPress Theme + RTL <= 1.3.9 - Unauthenticated PHP Object Injection
Slug
hotstar
Published
2025-05-16
Title
HotStar – Multi-Purpose Business Theme <= 1.4 - Missing Authorization
Slug
hotstar
Published
2025-05-19
Title
HotStar – Multi-Purpose Business Theme <= 1.4 - Unauthenticated PHP Object Injection
Slug
houzez
Published
2020-01-11
Title
Houzez < 1.8.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
houzez
Published
2024-08-12
Title
Houzez < 3.2.5 - Reflected Cross-Site Scripting
Slug
houzez
Published
2024-09-17
Title
Houzez < 3.3.0 - Subscriber+ Privilege Escalation
Slug
houzez
Published
2025-01-24
Title
Houzez < 3.4.2 - Missing Authorization
Slug
houzez
Published
2025-01-21
Title
Houzez < 3.4.2 - Missing Authorization
Slug
houzez
Published
2025-07-01
Title
Houzez < 4.0.8 - Unauthenticated Local File Inclusion
Slug
houzez
Published
2025-07-16
Title
Houzez < 4.1.1 - Missing Authorization
Slug
houzez
Published
2025-08-20
Title
Houzez < 4.1.4 - Missing Authorization
Slug
houzez
Published
2025-08-27
Title
Houzez < 4.1.4 - Reflected Cross-Site Scripting
Slug
houzez
Published
2025-08-27
Title
Houzez < 4.1.4 - Unauthenticated Local File Inclusion
Slug
houzez
Published
2025-10-16
Title
Houzez < 4.2.0 - Unauthenticated Local File Inclusion
Slug
houzez
Published
2025-11-26
Title
Houzez < 4.1.7 - Authenticated (Subscriber+) PHP Object Injection via Saved Search
Slug
houzez
Published
2025-11-26
Title
Houzez < 4.1.7 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
houzez
Published
2025-07-11
Title
Houzez <= 4.2.5 - Subscriber+ Insecure Direct Object Reference
Slug
houzez
Published
2023-02-27
Title
Houzez < 2.7.2 - Unauthenticated Privilege Escalation
Slug
houzez
Published
2026-10-14
Title
Houzez < 4.4.1 - Reflected Cross-Site Scripting
Slug
hoverex
Published
2026-03-03
Title
Hoverex | Cryptocurrency & ICO Elementor Template Kit <= 1.5.10 - Unauthenticated Local File Inclusion