WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
jobeleon-wpjobboard
Published
2024-03-28
Title
Jobeleon Theme < 1.9.2 - Reflected Cross-Site Scripting
Slug
jobify
Published
2024-11-19
Title
Jobify - Job Board WordPress Theme <= 4.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jobify
Published
2024-11-18
Title
Jobify - Job Board WordPress Theme <= 4.2.3 - Missing Authorization
Slug
jobify
Published
2024-11-18
Title
Jobify - Job Board WordPress Theme <= 4.2.3 - Unauthenticated Arbitrary File Read
Slug
jobify
Published
2024-11-18
Title
Jobify - Job Board WordPress Theme <= 4.2.3 - Cross-Site Request Forgery
Slug
jobify
Published
2025-01-23
Title
Jobify - Job Board WordPress Theme < 4.2.8 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation
Slug
jobify
Published
2026-01-05
Title
Jobify < 4.3.1 - Reflected Cross-Site Scripting
Slug
jobify
Published
2026-06-29
Title
Jobify < 4.3.3 - Unauthenticated Stored Cross-Site Scripting
Slug
jobroller
Published
2014-08-01
Title
XSS in jobroller theme
Slug
jobscout
Published
2024-06-28
Title
JobScout < 1.1.5 - Cross-Site Request Forgery to Notice Dimissal
Slug
jobscout
Published
2026-02-09
Title
JobScout < 1.1.8 - Missing Authorization
Slug
jobzilla
Published
2025-08-20
Title
JobZilla - Job Board WordPress Theme < 2.0.1 - Cross-Site Request Forgery
Slug
jobzilla
Published
2026-10-05
Title
JobZilla - Job Board WordPress Theme <= 2.2 - Authenticated (Subscriber+) Privilege Escalation
Slug
joly
Published
2025-10-08
Title
Joly < 1.23.0 - Unauthenticated Local File Inclusion
Slug
journalcrunch
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
js-o3-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
js-o3-lite
Published
2025-01-13
Title
Js O3 Lite <= 1.5.8.2 - Reflected Cross-Site Scripting
Slug
js-paper
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
js-paper
Published
2024-10-21
Title
Js paper <= 2.5.7 - Reflected Cross-Site Scripting
Slug
jude
Published
2026-02-17
Title
Jude <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
julia-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
junotoys
Published
2026-10-08
Title
Juno <= 2.25 - Unauthenticated PHP Object Injection
Slug
jupiter
Published
2022-05-18
Title
Jupiter < 6.10.2 & JupiterX Core < 2.0.8 - Subscriber+ Privilege Escalation and Post Deletion
Slug
jupiter
Published
2022-05-18
Title
Jupiter < 6.10.2 - Subscriber+ Arbitrary Plugin Deletion
Slug
jupiter
Published
2022-05-18
Title
Jupiter < 6.10.2 & JupiterX < 2.0.7 - Subscriber+ Path Traversal and Local File Inclusion