WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
nasio
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
NativeChurch
Published
2014-09-28
Title
NativeChurch Theme - Arbitrary File Download
Slug
naturemag-lite
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
neosense
Published
2016-09-19
Title
Neosense Theme < 1.8 - Unrestricted File Upload
Slug
networker
Published
2024-03-26
Title
Networker - Tech News WordPress Theme with Dark Mode < 1.1.10 - Missing Authorization
Slug
news
Published
2011-09-27
Title
News < 0.2 - XSS
Slug
news-unlimited
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
newshit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
newsmag
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
Newsmag
Published
2021-07-12
Title
Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)
Slug
newsmag
Published
2023-03-16
Title
Newsmag <= 2.4.4 - Subscriber+ Reflected Cross-Site Scripting
Slug
Newsmag
Published
2022-10-24
Title
tagDiv Composer < 3.5 - Unauthenticated Account Takeover
Slug
newsmatic
Published
2024-03-25
Title
Newsmatic < 1.3.5 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content
Slug
Newspaper
Published
2016-06-06
Title
Newspaper Theme 6.4–6.7.1 - Privilege Escalation
Slug
Newspaper
Published
2019-02-14
Title
Newspaper Theme < 9.5 - Cross-Site Scripting (XSS)
Slug
Newspaper
Published
2020-06-03
Title
Newspaper < 10.3.4 - Authenticated Reflected Cross-Site Scripting
Slug
Newspaper
Published
2021-06-30
Title
Newspaper < 11 - Reflected Cross-Site Scripting (XSS)
Slug
Newspaper
Published
2022-10-10
Title
Newspaper < 12 - Reflected Cross-Site Scripting
Slug
Newspaper
Published
2022-10-24
Title
tagDiv Composer < 3.5 - Unauthenticated Account Takeover
Slug
Newspaper
Published
2022-10-10
Title
Newspaper < 12 - Reflected Cross-Site Scripting
Slug
newspaper-x
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
newsxpress
Published
2024-04-10
Title
NewsXpress < 1.0.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
nexos
Published
2019-09-08
Title
Nexos - Real Estate < 1.6.1 - SQL Injection & Persistent XSS
Slug
nexos
Published
2020-06-28
Title
Nexos - Real Estate < 1.8 - Unauthenticated Reflected XSS & SQL Injection
Slug
nexter
Published
2023-10-12
Title
Nexter < 2.0.4 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'