WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
kata-business
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
katelyn
Published
2025-08-04
Title
Katelyn <= 1.0.10 - Unauthenticated Local File Inclusion
Slug
katerio
Published
2025-06-25
Title
Katerio - Magazine <= 1.5.1 - Unauthenticated Local File Inclusion
Slug
kaven-wp
Published
2026-10-08
Title
Kaven <= 1.2 - Unauthenticated Local File Inclusion
Slug
kayon
Published
2026-03-02
Title
Kayon <= 1.3 - Unauthenticated Local File Inclusion
Slug
kbase
Published
2025-09-04
Title
Knowledge Base <= 2.9 - Authenticated (Subscriber+) PHP Object Injection
Slug
keenarch
Published
2026-03-03
Title
Keenarch < 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
kelly-young
Published
2026-05-26
Title
Kelly Young <= 1.1.0 - Unauthenticated Local File Inclusion
Slug
kentha
Published
2026-03-18
Title
Kentha <= 4.7.2 - Reflected Cross-Site Scripting
Slug
kerge
Published
2025-12-15
Title
Kerge < 4.1.4 - Unauthenticated Server-Side Request Forgery
Slug
kernel-theme
Published
2014-08-01
Title
Kernel Theme - functions/upload-h&ler.php File Upload Remote Code Execution
Slug
kiamo
Published
2025-05-21
Title
Kiamo - Responsive Business Service WordPress Theme < 1.3.6 - Unauthenticated Local File Inclusion
Slug
kicker
Published
2025-08-19
Title
Kicker <= 2.2.0 - Unauthenticated Local File Inclusion
Slug
kicker
Published
2026-10-08
Title
Kicker - Blog Magazine Theme <= 2.2.1 - Unauthenticated PHP Object Injection
Slug
kiddo
Published
2014-08-01
Title
Kiddo - remote shell upload
Slug
kiddy
Published
2026-03-27
Title
Kiddy < 2.0.9 - Unauthenticated Local File Inclusion
Slug
kids-gift-shop
Published
2026-04-20
Title
Kids Gift Shop < 0.5.5 - Subscriber+ Arbitrary File Upload
Slug
kids-online-store
Published
2026-04-20
Title
Kids Online Store < 0.9.0 - Subscriber+ Arbitrary File Upload
Slug
kids-world
Published
2026-01-13
Title
Kids Heaven <= 3.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
kidscare
Published
2026-10-07
Title
Kids Care <= 3.2.4 - Unauthenticated Local File Inclusion
Slug
kidslife
Published
2026-06-30
Title
Kids Life | Children School WordPress <= 5.2 - Unauthenticated Stored Cross-Site Scripting
Slug
kidsplanet
Published
2025-05-21
Title
Kids Planet < 2.2.14.1 - Unauthenticated PHP Object Injection
Slug
kidsplanet
Published
2026-10-07
Title
Kids Planet - Children Kindergarten and Playgroup WordPress Theme <= 2.2.14.2 - Reflected Cross-Site Scripting
Slug
kidszone
Published
2026-06-30
Title
Kids Zone - Children WordPress <= 5.4 - Unauthenticated Stored Cross-Site Scripting
Slug
kidz
Published
2026-03-23
Title
KIDZ < 5.25 - Unauthenticated PHP Object Injection