WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
mTheme-Unus
Published
2015-09-30
Title
mTheme-Unus Theme - Local File Inclusion (LFI)
Slug
mTheme-Unus
Published
2015-09-30
Title
mTheme Unus < 2.3 - Directory Traversal
Slug
machic
Published
2023-12-07
Title
Multiple Themes by KlbTheme - Cross-Site Request Forgery
Slug
madara
Published
2025-05-20
Title
Madara – Responsive and modern WordPress theme for manga sites < 2.2.2.1 - Unauthenticated Local File Inclusion
Slug
magazine-basic
Published
2014-08-01
Title
Magazine Basic - wp-content/themes/magazine-basic/view_artist.php id Parameter SQL Injection
Slug
magazine-edge
Published
2023-02-02
Title
Magazine Edge <= 1.13 - Subscriber+ Arbitrary Plugin Activation
Slug
magazine-elite
Published
2025-08-21
Title
Magazine Elite <= 1.2.4 - Unauthenticated Local File Inclusion
Slug
magazine-saga
Published
2025-08-25
Title
Magazine Saga <= 1.2.7 - Unauthenticated Local File Inclusion
Slug
magnitudo
Published
2014-08-01
Title
Magnitudo - Arbitrary File Upload
Slug
magone
Published
2025-06-23
Title
MagOne <= 8.5 - Reflected Cross-Site Scripting
Slug
mags
Published
2024-10-21
Title
Mags < 1.1.7 - Unauthenticated Local File Inclusion
Slug
magty
Published
2025-06-25
Title
Magty < 1.0.7 - Unauthenticated Local File Inclusion
Slug
magways
Published
2025-06-25
Title
Magways < 1.2.2 - Unauthenticated Local File Inclusion
Slug
magze
Published
2025-06-25
Title
Magze < 1.0.10 - Unauthenticated Local File Inclusion
Slug
maia
Published
2025-06-11
Title
Maia < 1.1.16 - Unauthenticated Local File Inclusion
Slug
make_a_statement
Published
2014-08-01
Title
Make A Statement - CSRF
Slug
makeaholic
Published
2025-08-14
Title
Makeaholic < 1.8.5 - Unauthenticated Local File Inclusion
Slug
makeaholic
Published
2025-08-27
Title
Makeaholic < 1.8.7 - Missing Authorization
Slug
malmonation
Published
2014-08-01
Title
Malmonation - debate.php id Parameter SQL Injection
Slug
manbiz2
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
manbiz2
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
mantra
Published
2024-08-29
Title
Mantra <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
massive-dynamic
Published
2025-02-23
Title
Massive Dynamic <= 8.2 - Unauthenticated Local File Inclusion
Slug
masterstudy
Published
2025-10-30
Title
Masterstudy < 4.8.126 - Authenticated (Contributor+) Local File Inclusion
Slug
materialis
Published
2019-12-02
Title
Mesmerize & Materialis Themes - Authenticated Options Update