WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
listingpro
Published
2019-11-29
Title
ListingPro < 2.0.14.5 - Reflected & Persistent Cross-Site Scripting
Slug
listingpro
Published
2020-01-15
Title
ListingPro < 2.5.4 - Unauthenticated Reflected Cross-Site Scripting
Slug
listingpro
Published
2020-12-17
Title
ListingPro < 2.6.1 - Unauthenticated Arbitrary Plugin Installation/Activation/Deactivation
Slug
listingpro
Published
2020-12-17
Title
ListingPro < 2.6.1 - Unauthenticated Sensitive Data Disclosure (Usernames, Emails etc)
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Subscriber+ Local File Inclusion
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Cross-Site Request Forgery to Account Takeover
Slug
listingpro
Published
2024-07-22
Title
ListingPro < 2.9.5 - Unauthenticated SQL Injection
Slug
listingpro
Published
2025-10-19
Title
ListingPro <= 2.9.9 - Missing Authorization
Slug
listingpro
Published
2025-11-06
Title
ListingPro <= 2.9.9 - Missing Authorization
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Unauthenticated Local File Inclusion
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Reflected Cross-Site Scripting
Slug
listingpro
Published
2025-09-12
Title
ListingPro < 2.9.10 - Missing Authorization
Slug
listingpro
Published
2026-06-24
Title
ListingPro - WordPress Directory & Listing Theme < 2.9.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
listivo
Published
2025-02-12
Title
Listivo - Classified Ads WordPress Theme < 2.3.68 - Reflected Cross-Site Scripting
Slug
little-birdies
Published
2026-02-26
Title
Little Birdies | Multipurpose Children PSD Template <= 1.3.16 - Unauthenticated Local File Inclusion
Slug
lms
Published
2025-06-23
Title
LMS < 9.3 - Reflected Cross-Site Scripting
Slug
lms
Published
2025-06-30
Title
LMS < 9.3 - Unauthenticated SQL Injection
Slug
lms
Published
2026-06-30
Title
LMS <= 9.7 - Reflected Cross-Site Scripting
Slug
lobo
Published
2025-11-14
Title
Lobo < 2.8.7 - Missing Authorization
Slug
lobo
Published
2026-01-05
Title
Lobo < 2.8.6 - Authenticated (Subscriber+) SQL Injection
Slug
logistics-hub
Published
2025-06-30
Title
LogisticsHub <= 1.1.6 - Unauthenticated Arbitrary File Upload
Slug
logtik
Published
2025-09-12
Title
Logtik < 2.4 - Reflected Cross-Site Scripting
Slug
lonie
Published
2026-04-20
Title
Léonie < 1.3 - Unauthenticated PHP Object Injection
Slug
loobek
Published
2026-03-20
Title
Loobek < 1.5.2 - Reflected Cross-Site Scripting
Slug
looki-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS