WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
i-amaze
Published
2024-07-11
Title
i-amaze <= 1.3.7 - Cross-Site Request Forgery
Slug
i-love-it
Published
2014-08-01
Title
I Love It - VideoJS Cross-Site Scripting
Slug
i-transform
Published
2024-07-12
Title
i-transform <= 3.0.9 - Cross-Site Request Forgery
Slug
idyllic
Published
2024-06-06
Title
Idyllic < 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ignition
Published
2021-03-24
Title
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Slug
ignition
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
ih-business-pro
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
ilex
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
illdy
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
iloveit
Published
2014-08-01
Title
Love It - XSS / Content Spoofing / Path Disclosure
Slug
imevent
Published
2025-09-22
Title
imEvent <= 3.4.0 - Missing Authorization
Slug
immiex
Published
2025-10-17
Title
Sale! Immigration law, Visa services support, Migration Agent Consulting <= 1.5.8 - Authenticated (Subscriber+) Privilege Escalation
Slug
imperial-fairytale
Published
2014-08-01
Title
Imperial Fairytale - Multiple Script Direct Request Path Disclosure
Slug
imperial-fairytale
Published
2014-08-01
Title
Imperial Fairytale - jPlayer Cross-Site Scripting
Slug
indoor-plants
Published
2025-12-31
Title
Indoor Plants <= 1.2.7 - Unauthenticated Local File Inclusion
Slug
industrial
Published
2025-03-13
Title
Industrial < 1.7.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
industrial-lite
Published
2025-04-10
Title
Industrial Lite <= 1.0.8 - Missing Authorization
Slug
indutri
Published
2025-08-30
Title
Indutri < 1.3.0 - Unauthenticated Local File Inclusion
Slug
infinite
Published
2024-06-27
Title
Infinite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via project_url Parameter
Slug
infocus
Published
2014-08-01
Title
InFocus - Arbitrary File Download
Slug
infocus
Published
2014-08-01
Title
Multiple Themes - PrettyPhoto DOM XSS
Slug
inhype
Published
2025-07-22
Title
InHype - Blog & Magazine WordPress <= 1.5.2 - Unauthenticated Local File Inclusion
Slug
injob
Published
2019-09-16
Title
InJob < 3.3.8 - Reflected & Persistent XSS
Slug
injob
Published
2020-07-10
Title
InJob < 3.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
innovio
Published
2026-01-02
Title
Innovio <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference