WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
jack-well
Published
2025-09-05
Title
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
Slug
jacqueline
Published
2026-10-08
Title
Jacqueline | Spa & Massage Salon Beauty Theme <= 2.22 - Unauthenticated PHP Object Injection
Slug
jannah
Published
2021-06-14
Title
Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)
Slug
jannah
Published
2021-06-07
Title
Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)
Slug
jannah
Published
2025-08-25
Title
Jannah < 7.5.1 - Unauthenticated Local File Inclusion
Slug
jannah
Published
2025-10-29
Title
Jannah < 7.6.1 - Unauthenticated Local File Inclusion
Slug
jannah
Published
2025-10-29
Title
Jannah < 7.6.1 - Unauthenticated Stored Cross-Site Scripting
Slug
jannah
Published
2025-10-29
Title
Jannah < 7.6.1 - Unauthenticated PHP Object Injection
Slug
jannah
Published
2026-03-16
Title
Jannah - Newspaper Magazine News BuddyPress AMP < 7.6.5 - Unauthenticated Local File Inclusion
Slug
jannah
Published
2026-10-08
Title
Jannah - Newspaper Magazine News BuddyPress AMP <= 7.6.5 - Unauthenticated Stored Cross-Site Scripting
Slug
jardi
Published
2026-03-04
Title
Jardi | Winery, Vineyard & Wine Shop WordPress Theme <= 1.7.2 - Unauthenticated PHP Object Injection
Slug
jaroti
Published
2026-03-20
Title
Jaroti < 1.4.8 - Reflected Cross-Site Scripting
Slug
jarvis
Published
2025-05-19
Title
Jarvis – Night Club, Concert, Festival WordPress <= 1.8.11 - Unauthenticated PHP Object Injection
Slug
javo-spot
Published
2017-02-10
Title
Javo Spot Premium Theme - Unauthenticated Directory Traversal
Slug
jawn
Published
2026-08-20
Title
Jawn <= 1.4.2 - Unauthenticated Privilege Escalation
Slug
jetapo
Published
2020-07-13
Title
Jetapo < 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
jetapo-with-woocommerce
Published
2020-07-13
Title
Jetapo < 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
jewelry-store
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
jnews
Published
2021-05-24
Title
JNews < 8.0.6 - Reflected Cross-Site Scripting (XSS)
Slug
jnews
Published
2025-03-04
Title
JNews - WordPress Newspaper Magazine Blog AMP Theme < 11.6.7 - Unauthorized User Registration
Slug
jnews
Published
2025-04-22
Title
JNews < 12.0.8 - Missing Authorization
Slug
jobcareer
Published
2018-12-04
Title
JobCareer < 2.4.1 - User enumeration & Reset password
Slug
jobcareer
Published
2019-04-24
Title
JobCareer < 2.5.1 - Authenticated Stored Cross-Site Scripting
Slug
jobcareer
Published
2020-07-31
Title
JobCareer < 3.5 - Multiple Cross-Site Scripting (XSS)
Slug
jobcareer
Published
2026-05-26
Title
JobCareer <= 7.3 - Authenticated (Subscriber+) Arbitrary File Deletion