WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
onetone
Published
2020-04-03
Title
OneTone <= 3.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
onleash
Published
2025-08-19
Title
OnLeash <= 1.5.2 - Unauthenticated Local File Inclusion
Slug
opor-ayam
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
opor-ayam
Published
2024-08-29
Title
Opor Ayam <= 1.8 - Reflected Cross-Site Scripting
Slug
opstore
Published
2025-04-21
Title
Opstore <= 1.4.5 - Unauthenticated Local File Inclusion
Slug
optimizepress
Published
2013-11-29
Title
OptimizePress Theme < 1.6 - Unauthenticated Arbitrary File Upload
Slug
optimizewp
Published
2026-01-06
Title
Optimize < 2.4 - Unauthenticated Local File Inclusion
Slug
orchid-store
Published
2024-08-07
Title
Orchid Store < 1.5.7 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation
Slug
orchid-store
Published
2026-01-12
Title
Orchid Store <= 1.5.15 - Missing Authorization
Slug
organic-beauty
Published
2025-08-21
Title
Organic Beauty <= 1.4.6 - Unauthenticated PHP Object Injection
Slug
orgarium
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
oshin
Published
2026-01-07
Title
Oshine <= 7.2.7 - Unauthenticated Local File Inclusion
Slug
ostende
Published
2026-03-02
Title
OsTende <= 1.4.3 - Unauthenticated Local File Inclusion
Slug
otaku
Published
2025-08-23
Title
Otaku <= 1.8.0 - Unauthenticated Local File Inclusion
Slug
outdoor
Published
2023-04-04
Title
Outdoor < 3.9.7 - Reflected XSS
Slug
overton
Published
2026-01-02
Title
Overton <= 1.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
overton
Published
2026-02-25
Title
Overton - Creative WordPress Theme for Agencies and Freelancers <= 1.3 - Unauthenticated Local File Inclusion
Slug
overworld
Published
2025-12-30
Title
Overworld <= 1.3 - Unauthenticated Local File Inclusion
Slug
ovum
Published
2014-08-01
Title
Imediapixel - Cross-Site Scripting (XSS)
Slug
oxpitan
Published
2025-05-21
Title
Oxpitan < 1.3.6 - Unauthenticated Local File Inclusion
Slug
oxygen
Published
2026-01-27
Title
Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery
Slug
oxygen-theme
Published
2014-08-01
Title
Oxygen - Remote File Upload
Slug
oyster
Published
2026-01-28
Title
Oyster - Photography WordPress <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
Slug
ozisti
Published
2026-02-27
Title
Ozisti <= 1.1.10 - Unauthenticated Local File Inclusion