WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
pressive
Published
2021-03-24
Title
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Slug
pressive
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
pressmart
Published
2025-02-17
Title
PressMart - Modern Elementor WooCommerce WordPress Theme < 1.2.17 - Unauthenticated Arbitrary Shortcode Execution
Slug
pressroom
Published
2025-06-26
Title
Pressroom - News Magazine WordPress Theme < 7.1 - Reflected Cross-Site Scripting
Slug
presssmart
Published
2026-04-22
Title
PressMart < 1.2.27 - Unauthenticated PHP Object Injection
Slug
prestige
Published
2026-02-11
Title
Prestige < 1.4.1 - Reflected Cross-Site Scripting
Slug
prestige
Published
2026-02-11
Title
Prestige < 1.4.1 - Unauthenticated PHP Object Injection
Slug
prider
Published
2025-12-31
Title
Prider <= 1.1.3.1 - Unauthenticated Local File Inclusion
Slug
printo
Published
2026-05-27
Title
Printo <= 1.11 - Unauthenticated Local File Inclusion
Slug
printy
Published
2026-03-02
Title
Printy <= 1.8 - Unauthenticated Local File Inclusion
Slug
prisma
Published
2025-08-22
Title
Prisma <= 1.10 - Unauthenticated Local File Inclusion
Slug
progress
Published
2026-03-02
Title
Progress <= 1.2 - Unauthenticated Local File Inclusion
Slug
prolingua
Published
2026-03-05
Title
ProLingua <= 1.1.12 - Unauthenticated Local File Inclusion
Slug
prolist
Published
2020-07-13
Title
Prolisting - Directory Listing < 1.27 - Unauthenticated Reflected XSS
Slug
promo
Published
2026-01-12
Title
Promo <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
prostore
Published
2014-05-07
Title
Prostore < 1.1.3 - Open Redirection
Slug
prosume
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
prowess
Published
2026-01-03
Title
Prowess <= 1.8.1 - Missing Authorization
Slug
prowess
Published
2026-01-25
Title
Prowess <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Slug
prowess
Published
2026-03-03
Title
Prowess - Fitness and Gym WordPress Theme <= 1.8.1 - Unauthenticated Local File Inclusion
Slug
pubnews
Published
2024-12-05
Title
Pubnews < 1.0.8 - Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
pubzinne
Published
2025-08-19
Title
Pubzinne <= 1.0.12 - Unauthenticated Local File Inclusion
Slug
puca
Published
2025-06-23
Title
Puca < 2.6.34 - Unauthenticated Local File Inclusion
Slug
puca
Published
2025-12-20
Title
Puca <= 2.6.39 - Authenticated (Contributor+) Local File Inclusion
Slug
punte
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes