WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
plain-post
Published
2024-12-11
Title
Plain Post < 1.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
plant
Published
2025-05-16
Title
Plant - Gardening & Houseplants WordPress Theme <= 1.0.0 - Unauthenticated Information Exposure
Slug
platform
Published
2015-02-04
Title
Platform Theme < 1.4.4 - Privilege Escalation & RCE
Slug
platform
Published
2016-11-24
Title
PageLines Platform Theme <= 1.1.4 - Cross-Site Request Forgery (CSRF)
Slug
plato
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
pliska
Published
2024-04-30
Title
Pliska < 0.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Display Name
Slug
point-blog
Published
2024-07-09
Title
Point <= 1.1 - Cross-Site Request Forgery
Slug
politican__
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
polka-dots
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
polka-dots
Published
2025-01-13
Title
polka dots <= 1.2 - Reflected Cross-Site Scripting
Slug
poloray
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
pont
Published
2015-06-26
Title
Multiple Themes - Privilige Escalation
Slug
popularis-verse
Published
2024-07-12
Title
Popularis Verse < 1.0.2 - Cross-Site Request Forgery
Slug
porto
Published
2024-05-08
Title
Porto < 7.1.1 - Authenticated (Contributor+) Local File Inclusion via Post Meta
Slug
porto
Published
2024-05-08
Title
Porto < 7.1.1 - Unauthenticated Local File Inclusion via porto_ajax_posts
Slug
posterity
Published
2024-07-04
Title
Posterity < 3.4 - Cross-Site Request Forgery to Notice Dismissal
Slug
posterity
Published
2024-08-29
Title
Posterity <= 3.8 - Contributor+ Stored XSS
Slug
power-mag
Published
2025-01-07
Title
Power Mag <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerlift
Published
2025-11-27
Title
Powerlift < 3.2.1 - Missing Authorization
Slug
preschool-and-kindergarten
Published
2024-06-28
Title
Preschool and Kindergarten < 1.2.2 - Cross-Site Request Forgery to Notice Dismissal
Slug
press-grid
Published
2025-06-04
Title
PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Unauthenticated PHP Object Injection
Slug
pressive
Published
2021-03-24
Title
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Slug
pressive
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
pressmart
Published
2025-02-17
Title
PressMart - Modern Elementor WooCommerce WordPress Theme < 1.2.17 - Unauthenticated Arbitrary Shortcode Execution
Slug
pressroom
Published
2025-06-26
Title
Pressroom - News Magazine WordPress Theme <= 6.9 - Reflected Cross-Site Scripting