WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
i-love-it
Published
2014-08-01
Title
I Love It - VideoJS Cross-Site Scripting
Slug
ignition
Published
2021-03-24
Title
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Slug
ignition
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
ih-business-pro
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
ilex
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
illdy
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
iloveit
Published
2014-08-01
Title
Love It - XSS / Content Spoofing / Path Disclosure
Slug
imperial-fairytale
Published
2014-08-01
Title
Imperial Fairytale - Multiple Script Direct Request Path Disclosure
Slug
imperial-fairytale
Published
2014-08-01
Title
Imperial Fairytale - jPlayer Cross-Site Scripting
Slug
IncredibleWP
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
IncredibleWP
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
infocus
Published
2014-08-01
Title
InFocus - Arbitrary File Download
Slug
infocus
Published
2014-08-01
Title
Multiple Themes - PrettyPhoto DOM XSS
Slug
injob
Published
2019-09-16
Title
InJob < 3.3.8 - Reflected & Persistent XSS
Slug
injob
Published
2020-07-10
Title
InJob < 3.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
inspiro
Published
2022-07-18
Title
Inspiro Premium < 7.2.3 - Contributor+ Stored Cross-Site Scripting
Slug
intrace
Published
2024-04-26
Title
Multiple Themes by jegstudio - Multiple Versions - Missing Authorization to Notice Dismissal
Slug
intrepidity
Published
2023-03-13
Title
Intrepidity <= 1.5.1 - File Upload and Option Update via CSRF