WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
manbiz2
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
mandala
Published
2026-02-27
Title
Mandala <= 2.8 - Unauthenticated Local File Inclusion
Slug
manoir
Published
2026-03-02
Title
Manoir <= 1.11 - Unauthenticated Local File Inclusion
Slug
mantra
Published
2024-08-29
Title
Mantra <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
manufactory
Published
2025-09-02
Title
Manufactory <= 1.4 - Unauthenticated Local File Inclusion
Slug
marcell
Published
2026-02-27
Title
Marcell <= 1.2.14 - Unauthenticated Local File Inclusion
Slug
marra
Published
2026-02-25
Title
Marra <= 1.2 - Unauthenticated Local File Inclusion
Slug
marveland
Published
2026-02-17
Title
Marveland <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
massive-dynamic
Published
2025-02-23
Title
Massive Dynamic <= 8.2 - Unauthenticated Local File Inclusion
Slug
masterstudy
Published
2025-10-30
Title
Masterstudy < 4.8.126 - Authenticated (Contributor+) Local File Inclusion
Slug
masterstudy
Published
2025-10-12
Title
Masterstudy < 4.8.122 - Missing Authorization
Slug
materialis
Published
2019-12-02
Title
Mesmerize & Materialis Themes - Authenticated Options Update
Slug
materialis
Published
2024-06-19
Title
Materialis < 1.1.30 - Missing Authorization to Limited Arbitrary Options Update
Slug
mavix-education
Published
2025-12-12
Title
Mavix Education < 1.1 - Missing Authorization to Authenticated (Subscriber+) 'Creativ Demo Importer' Plugin Activation
Slug
maxcoach
Published
2025-08-14
Title
MaxCoach < 3.2.6 - Unauthenticated Local File Inclusion
Slug
maxcube
Published
2025-08-19
Title
MaxCube <= 1.3.1 - Unauthenticated Local File Inclusion
Slug
maxify
Published
2026-03-02
Title
Maxify <= 1.0.16 - Unauthenticated Local File Inclusion
Slug
mbstore
Published
2025-06-23
Title
MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Unauthenticated Local File Inclusion
Slug
mckinney-politics
Published
2026-02-27
Title
MCKinney's Politics <= 1.2.8 - Unauthenticated Local File Inclusion
Slug
meals-wheels
Published
2026-03-02
Title
Meals & Wheels <= 1.1.12 - Unauthenticated Local File Inclusion
Slug
medcity
Published
2025-09-17
Title
Medcity < 1.1.9 - Unauthenticated Arbitrary File Upload
Slug
medibazar
Published
2023-12-07
Title
Multiple Themes by KlbTheme - Cross-Site Request Forgery
Slug
medicalequipment
Published
2025-12-26
Title
Medical Equipment eCommerce WordPress Theme <= 1.0.9 - Missing Authorization
Slug
medicare
Published
2025-05-20
Title
Medicare < 2.1.1 - Unauthenticated PHP Object Injection
Slug
medicate
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure