WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
injob
Published
2020-07-10
Title
InJob < 3.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
innovio
Published
2026-01-02
Title
Innovio <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
innovio
Published
2026-02-25
Title
Innovio - Multipurpose Landing Page WordPress Theme <= 1.7 - Unauthenticated Local File Inclusion
Slug
inset
Published
2025-06-09
Title
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Slug
inspiro
Published
2022-07-18
Title
Inspiro Premium < 7.2.3 - Contributor+ Stored Cross-Site Scripting
Slug
inspiro
Published
2025-08-20
Title
Inspiro < 2.1.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Slug
instantva
Published
2026-03-12
Title
Instant VA < 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
insurance
Published
2025-05-21
Title
Insurance <= 3.5 - Authenticated (Subscriber+) PHP Object Injection
Slug
integro
Published
2025-08-23
Title
Integro <= 1.8.0 - Unauthenticated Local File Inclusion
Slug
interface
Published
2024-06-17
Title
Interface < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
intothedark
Published
2024-08-26
Title
IntoTheDark <= 1.0.5 - Reflected Cross-Site Scripting
Slug
intrace
Published
2024-04-26
Title
Multiple Themes by jegstudio - Multiple Versions - Missing Authorization to Notice Dismissal
Slug
intrepidity
Published
2023-03-13
Title
Intrepidity <= 1.5.1 - File Upload and Option Update via CSRF
Slug
invetex
Published
2026-03-02
Title
Invetex <= 2.18 - Unauthenticated Local File Inclusion
Slug
invico
Published
2025-07-07
Title
Invico - WordPress Consulting Business Theme <= 1.9 - Reflected Cross-Site Scripting
Slug
ipharm
Published
2025-08-19
Title
IPharm <= 1.2.3 - Unauthenticated Local File Inclusion
Slug
ippsum
Published
2026-02-16
Title
Ippsum < 1.2.1 - Unauthenticated PHP Object Injection
Slug
ireca
Published
2025-08-27
Title
Ireca < 1.8.6 - Unauthenticated Local File Inclusion
Slug
ironfit
Published
2026-02-17
Title
Ironfit <= 1.5 - Unauthenticated Local File Inclusion
Slug
isida
Published
2026-02-17
Title
Isida <= 1.4.2 - Unauthenticated Local File Inclusion
Slug
issabella
Published
2026-01-01
Title
Issabella <= 1.1.2 - Unauthenticated Local File Inclusion
Slug
itok
Published
2025-09-04
Title
ITok < 1.1.43.1 - Unauthenticated Local File Inclusion
Slug
itsulu
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion
Slug
ivy-school
Published
2025-04-17
Title
IvyPrep < 1.6.1 - Unauthenticated Local File Inclusion