WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
pagelines
Published
2015-01-22
Title
Pagelines Theme <= 1.4.5 - Privilege escalation
Slug
palatio
Published
2025-08-22
Title
Palatio <= 1.6 - Unauthenticated Local File Inclusion
Slug
palladio
Published
2025-09-05
Title
Palladio <= 1.1.10 - Unauthenticated Local File Inclusion
Slug
panda
Published
2025-08-19
Title
Panda <= 1.21 - Unauthenticated Local File Inclusion
Slug
pantry
Published
2025-08-22
Title
Pantry <= 1.4 - Unauthenticated Local File Inclusion
Slug
parabola
Published
2024-08-29
Title
Parabola <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paragon
Published
2025-09-02
Title
Paragon <= 1.1 - Unauthenticated Local File Inclusion
Slug
parallax-blog
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
parallaxsome
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
parallelus-intersect
Published
2014-08-01
Title
Multiple Parallelus Themes - Reflected Cross-Site Scripting (XSS)
Slug
parallelus-salutation
Published
2014-08-01
Title
Multiple Parallelus Themes - Reflected Cross-Site Scripting (XSS)
Slug
parallelus-salutation
Published
2017-07-31
Title
Salutation Responsive < 3.0.16 - Stored XSS
Slug
parallelus-traject
Published
2014-08-01
Title
Multiple Parallelus Themes - Reflected Cross-Site Scripting (XSS)
Slug
parallelus-unite
Published
2014-08-01
Title
Multiple Parallelus Themes - Reflected Cross-Site Scripting (XSS)
Slug
paramount
Published
2014-08-01
Title
Paramount - Unspecified XSS
Slug
paroti
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
partdo
Published
2023-12-07
Title
Multiple Themes by KlbTheme - Cross-Site Request Forgery
Slug
partymaker
Published
2025-12-31
Title
PartyMaker <= 1.1.15 - Unauthenticated Local File Inclusion
Slug
patch-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pathfinder
Published
2025-08-23
Title
Pathfinder <= 1.16 - Unauthenticated Local File Inclusion
Slug
pathway
Published
2024-04-26
Title
ColibriWP Theme framework - Various Versions and Themes - Missing Authorization
Slug
patricia-blog
Published
2024-07-11
Title
Patricia Blog <= 1.2 - Cross-Site Request Forgery
Slug
patricia-lite
Published
2024-07-09
Title
Patricia Lite <= 1.2.3 - Cross-Site Request Forgery
Slug
pawfriends
Published
2025-12-30
Title
PawFriends - Pet Shop and Veterinary WordPress <= 1.3 - Cross-Site Request Forgery
Slug
peakshops
Published
2026-01-23
Title
PeakShops < 1.5.9 - Unauthenticated Local File Inclusion