WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
polka-dots
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
polka-dots
Published
2025-01-13
Title
polka dots <= 1.2 - Reflected Cross-Site Scripting
Slug
poloray
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
pont
Published
2015-06-26
Title
Multiple Themes - Privilige Escalation
Slug
pool-services
Published
2025-11-27
Title
Pool Services <= 3.3 - Unauthenticated Server-Side Request Forgery
Slug
popularis-verse
Published
2024-07-12
Title
Popularis Verse < 1.0.2 - Cross-Site Request Forgery
Slug
porto
Published
2024-05-08
Title
Porto < 7.1.1 - Authenticated (Contributor+) Local File Inclusion via Post Meta
Slug
porto
Published
2024-05-08
Title
Porto < 7.1.1 - Unauthenticated Local File Inclusion via porto_ajax_posts
Slug
porto
Published
2026-02-27
Title
Porto <= 7.6.2 - Reflected Cross-Site Scripting
Slug
posterity
Published
2024-07-04
Title
Posterity < 3.4 - Cross-Site Request Forgery to Notice Dismissal
Slug
posterity
Published
2024-08-29
Title
Posterity <= 3.8 - Contributor+ Stored XSS
Slug
power-mag
Published
2025-01-07
Title
Power Mag <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerlift
Published
2025-11-27
Title
Powerlift < 3.2.1 - Missing Authorization
Slug
powerlift
Published
2026-01-16
Title
Powerlift < 3.2.1 - Unauthenticated Local File Inclusion
Slug
preschool-and-kindergarten
Published
2024-06-28
Title
Preschool and Kindergarten < 1.2.2 - Cross-Site Request Forgery to Notice Dismissal
Slug
press-grid
Published
2025-06-04
Title
PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Unauthenticated PHP Object Injection
Slug
pressive
Published
2021-03-24
Title
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Slug
pressive
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
pressmart
Published
2025-02-17
Title
PressMart - Modern Elementor WooCommerce WordPress Theme < 1.2.17 - Unauthenticated Arbitrary Shortcode Execution
Slug
pressroom
Published
2025-06-26
Title
Pressroom - News Magazine WordPress Theme < 7.1 - Reflected Cross-Site Scripting
Slug
prestige
Published
2026-02-11
Title
Prestige < 1.4.1 - Reflected Cross-Site Scripting
Slug
prestige
Published
2026-02-11
Title
Prestige < 1.4.1 - Unauthenticated PHP Object Injection
Slug
prider
Published
2025-12-31
Title
Prider <= 1.1.3.1 - Unauthenticated Local File Inclusion
Slug
printy
Published
2026-03-02
Title
Printy <= 1.8 - Unauthenticated Local File Inclusion
Slug
prisma
Published
2025-08-22
Title
Prisma <= 1.10 - Unauthenticated Local File Inclusion