WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
katerio
Published
2025-06-25
Title
Katerio - Magazine <= 1.5.1 - Unauthenticated Local File Inclusion
Slug
kayon
Published
2026-03-02
Title
Kayon <= 1.3 - Unauthenticated Local File Inclusion
Slug
kbase
Published
2025-09-04
Title
Knowledge Base <= 2.9 - Authenticated (Subscriber+) PHP Object Injection
Slug
keenarch
Published
2026-03-03
Title
Keenarch < 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
kelly-young
Published
2026-05-26
Title
Kelly Young <= 1.1.0 - Unauthenticated Local File Inclusion
Slug
kentha
Published
2026-03-18
Title
Kentha <= 4.7.2 - Reflected Cross-Site Scripting
Slug
kerge
Published
2025-12-15
Title
Kerge < 4.1.4 - Unauthenticated Server-Side Request Forgery
Slug
kernel-theme
Published
2014-08-01
Title
Kernel Theme - functions/upload-h&ler.php File Upload Remote Code Execution
Slug
kiamo
Published
2025-05-21
Title
Kiamo - Responsive Business Service WordPress Theme < 1.3.6 - Unauthenticated Local File Inclusion
Slug
kicker
Published
2025-08-19
Title
Kicker <= 2.2.0 - Unauthenticated Local File Inclusion
Slug
kiddo
Published
2014-08-01
Title
Kiddo - remote shell upload
Slug
kiddy
Published
2026-03-27
Title
Kiddy < 2.0.9 - Unauthenticated Local File Inclusion
Slug
kids-gift-shop
Published
2026-04-20
Title
Kids Gift Shop < 0.5.5 - Subscriber+ Arbitrary File Upload
Slug
kids-online-store
Published
2026-04-20
Title
Kids Online Store < 0.9.0 - Subscriber+ Arbitrary File Upload
Slug
kids-world
Published
2026-01-13
Title
Kids Heaven <= 3.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
kidslife
Published
2026-06-30
Title
Kids Life | Children School WordPress <= 5.2 - Unauthenticated Stored Cross-Site Scripting
Slug
kidsplanet
Published
2025-05-21
Title
Kids Planet < 2.2.14.1 - Unauthenticated PHP Object Injection
Slug
kidszone
Published
2026-06-30
Title
Kids Zone - Children WordPress <= 5.4 - Unauthenticated Stored Cross-Site Scripting
Slug
kidz
Published
2026-03-23
Title
KIDZ < 5.25 - Unauthenticated PHP Object Injection
Slug
kindlycare
Published
2026-01-29
Title
KindlyCare <= 1.6.1 - Unauthenticated PHP Object Injection
Slug
kingcabs
Published
2025-12-12
Title
Kingcabs < 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter
Slug
kingclub-theme
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
kingler
Published
2026-02-23
Title
Kingler <= 1.7 - Unauthenticated PHP Object Injection
Slug
kings-queens
Published
2025-09-05
Title
Kings & Queens <= 1.1.16 - Unauthenticated Local File Inclusion
Slug
kinsley
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion