WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
linenity
Published
2014-08-01
Title
LineNity 1.20 - download.php imgurl Parameter Remote Path Traversal File Access
Slug
lingvico
Published
2026-03-02
Title
Lingvico <= 1.0.14 - Unauthenticated Local File Inclusion
Slug
lione
Published
2025-08-30
Title
Lione <= 1.16 - Unauthenticated Local File Inclusion
Slug
liquido
Published
2024-08-29
Title
Liquido <= 1.0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listee
Published
2026-02-26
Title
Listee < 1.1.7 - Unauthenticated Privilege Escalation
Slug
listeo
Published
2021-05-16
Title
Listeo < 1.6.11 - Multiple XSS & XFS vulnerabilities
Slug
listeo
Published
2021-05-16
Title
Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities
Slug
listeo
Published
2025-10-24
Title
Listeo < 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode
Slug
listify
Published
2025-10-22
Title
Listify <= 3.2.5 - Cross-Site Request Forgery
Slug
listify
Published
2026-03-02
Title
Listify <= 3.2.5 - Reflected Cross-Site Scripting
Slug
listihub
Published
2026-01-22
Title
Listihub <= 1.0.6 - Missing Authorization
Slug
listingeasy
Published
2025-07-07
Title
ListingEasy <= 1.9.2 - Reflected Cross-Site Scripting
Slug
listingo
Published
2022-11-21
Title
Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload
Slug
listingo
Published
2025-03-04
Title
Listingo - Business Listing and Directory WordPress Theme <= 3.2.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
listingpro
Published
2019-11-29
Title
ListingPro < 2.0.14.5 - Reflected & Persistent Cross-Site Scripting
Slug
listingpro
Published
2020-01-15
Title
ListingPro < 2.5.4 - Unauthenticated Reflected Cross-Site Scripting
Slug
listingpro
Published
2020-12-17
Title
ListingPro < 2.6.1 - Unauthenticated Arbitrary Plugin Installation/Activation/Deactivation
Slug
listingpro
Published
2020-12-17
Title
ListingPro < 2.6.1 - Unauthenticated Sensitive Data Disclosure (Usernames, Emails etc)
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Subscriber+ Local File Inclusion
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Cross-Site Request Forgery to Account Takeover
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Unauthenticated SQL Injection
Slug
listingpro
Published
2025-10-19
Title
ListingPro <= 2.9.9 - Missing Authorization
Slug
listingpro
Published
2025-11-06
Title
ListingPro <= 2.9.9 - Missing Authorization
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Unauthenticated Local File Inclusion
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Reflected Cross-Site Scripting