WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
kaffen
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion
Slug
kahuna
Published
2024-08-29
Title
Kahuna < 1.7.0.1 - Contributor+ Stored XSS
Slug
kalium
Published
2025-08-14
Title
Kalium <= 3.18.3 - Cross-Site Request Forgery
Slug
kalium
Published
2025-08-21
Title
Kalium <= 3.18.3 - Missing Authorization
Slug
kalium
Published
2025-06-19
Title
Kalium < 3.26 - Unauthenticated Arbitrary Code Execution
Slug
kalium
Published
2025-01-04
Title
Kalium < 3.19 - Reflected Cross-Site Scripting
Slug
kallyas
Published
2025-07-25
Title
Kallyas < 4.22.0 - Authenticated (Contributor+) Arbitrary Folder Deletion
Slug
kallyas
Published
2025-07-25
Title
Kallyas < 4.22.0 - Authenticated (Contributor+) Local File Inclusion
Slug
kallyas
Published
2025-10-16
Title
Kallyas < 4.23.0 - Missing Authorization
Slug
kallyas
Published
2025-10-16
Title
Kallyas < 4.23.0 - Missing Authorization
Slug
kallyas
Published
2025-10-31
Title
Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution
Slug
kallyas
Published
2025-10-31
Title
Kallyas < 4.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kallyas
Published
2025-09-06
Title
Kallyas < 4.23.0 - Authenticated (Contributor+) Arbitrary File Upload
Slug
kallyas
Published
2025-10-16
Title
Kallyas <= 4.22.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
karzo
Published
2025-10-12
Title
Karzo < 2.6 - Unauthenticated Local File Inclusion
Slug
kata
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
kata-app
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
kata-business
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
katerio
Published
2025-06-25
Title
Katerio - Magazine <= 1.5.1 - Unauthenticated Local File Inclusion
Slug
kbase
Published
2025-09-04
Title
Knowledge Base <= 2.9 - Authenticated (Subscriber+) PHP Object Injection
Slug
kernel-theme
Published
2014-08-01
Title
Kernel Theme - functions/upload-h&ler.php File Upload Remote Code Execution
Slug
kiamo
Published
2025-05-21
Title
Kiamo - Responsive Business Service WordPress Theme <= 1.3.3 - Unauthenticated Local File Inclusion
Slug
kiddo
Published
2014-08-01
Title
Kiddo - remote shell upload
Slug
kidsplanet
Published
2025-05-21
Title
Kids Planet < 2.2.14.1 - Unauthenticated PHP Object Injection
Slug
kingclub-theme
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload