Skip to content
Features
Pricing
Solutions
Status
API Details
CLI Scanner
Vulnerabilities
Themes
WordPress
Plugins
Stats
Submit Vulnerabilities
Leaderboard
Resources
Blog
Enterprise Features
How to Install WPScan
WPScan Glossary
2024 Website Threat Report
Search
WordPress Theme Vulnerabilities
Show Previous Letters
0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z
Show Next Letters
Slug
Published
Title
Slug
prestige
Published
2026-02-11
Title
Prestige < 1.4.1 - Reflected Cross-Site Scripting
Slug
prestige
Published
2026-02-11
Title
Prestige < 1.4.1 - Unauthenticated PHP Object Injection
Slug
prider
Published
2025-12-31
Title
Prider <= 1.1.3.1 - Unauthenticated Local File Inclusion
Slug
printy
Published
2026-03-02
Title
Printy <= 1.8 - Unauthenticated Local File Inclusion
Slug
prisma
Published
2025-08-22
Title
Prisma <= 1.10 - Unauthenticated Local File Inclusion
Slug
progress
Published
2026-03-02
Title
Progress <= 1.2 - Unauthenticated Local File Inclusion
Slug
prolingua
Published
2026-03-05
Title
ProLingua <= 1.1.12 - Unauthenticated Local File Inclusion
Slug
prolist
Published
2020-07-13
Title
Prolisting - Directory Listing < 1.27 - Unauthenticated Reflected XSS
Slug
promo
Published
2026-01-12
Title
Promo <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
prostore
Published
2014-05-07
Title
Prostore < 1.1.3 - Open Redirection
Slug
prosume
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
prowess
Published
2026-01-03
Title
Prowess <= 1.8.1 - Missing Authorization
Slug
prowess
Published
2026-01-25
Title
Prowess <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Slug
prowess
Published
2026-03-03
Title
Prowess - Fitness and Gym WordPress Theme <= 1.8.1 - Unauthenticated Local File Inclusion
Slug
pubnews
Published
2024-12-05
Title
Pubnews < 1.0.8 - Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
pubzinne
Published
2025-08-19
Title
Pubzinne <= 1.0.12 - Unauthenticated Local File Inclusion
Slug
puca
Published
2025-06-23
Title
Puca < 2.6.34 - Unauthenticated Local File Inclusion
Slug
puca
Published
2025-12-20
Title
Puca <= 2.6.39 - Authenticated (Contributor+) Local File Inclusion
Slug
punte
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
purity
Published
2014-08-01
Title
Purity - Multiple Cross-Site Scripting Vulnerabilities
Slug
purity-of-soul
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
purity-of-soul
Published
2024-08-16
Title
Purity Of Soul <= 1.9 - Reflected Cross-Site Scripting
Slug
purosa
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
purosa
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
purus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Previous
3
4
5
6
7
Next
Subscribe
Subscribed
WPScan
Join 30,895 other subscribers
Sign me up
Already have a WordPress.com account?
Log in now.
WPScan
Subscribe
Subscribed
Sign up
Log in
Report this content
View site in Reader
Manage subscriptions
Collapse this bar