WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
ober
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion
Slug
oberliga_theme
Published
2014-08-01
Title
Oberliga - team.php team Parameter SQL Injection
Slug
oceanic
Published
2024-07-12
Title
Oceanic <= 1.0.53 - Cross-Site Request Forgery
Slug
oceanwp
Published
2024-03-28
Title
OceanWP < 3.5.5 - Subscriber+ Sensitive Information Exposure
Slug
oceanwp
Published
2025-06-18
Title
OceanWP < 4.1.0 - Contributor+ Stored XSS via Select HTML Tag
Slug
oceanwp
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
oceanwp
Published
2025-08-12
Title
OceanWP 4.0.9 - 4.1.1 - Ocean Extra Plugin Installation via CSRF
Slug
oceanwp
Published
2025-08-15
Title
OceanWP < 4.1.2 - Subscriber+ Limited Option Update
Slug
offset-writing
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
offset-writing
Published
2025-01-13
Title
offset writing <= 1.2 - Reflected Cross-Site Scripting
Slug
ofiz
Published
2025-07-07
Title
Ofiz - WordPress Business Consulting Theme <= 2.0 - Reflected Cross-Site Scripting
Slug
ogami
Published
2025-05-21
Title
Ogami <= 1.53 - Unauthenticated Local File Inclusion
Slug
olivia
Published
2024-12-16
Title
Olivia <= 0.9.5 - Reflected Cross-Site Scripting
Slug
ona
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
onair2
Published
2021-06-28
Title
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
Slug
one-page-conference
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
one-paze
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
onepagewebsite
Published
2014-08-01
Title
onepagewebsite - Full Path Disclosure
Slug
onepress
Published
2024-06-28
Title
OnePress < 2.3.7 - Cross-Site Request Forgery via save_settings()
Slug
onepress
Published
2024-07-11
Title
OnePress <= 2.3.8 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
onepress
Published
2025-02-03
Title
OnePress <= 2.3.11 - Missing Authorization
Slug
onepress
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
onetone
Published
2020-04-03
Title
OneTone <= 3.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
opor-ayam
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
opor-ayam
Published
2024-08-29
Title
Opor Ayam <= 1.8 - Reflected Cross-Site Scripting