WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
realhomes
Published
2025-06-09
Title
RH - Real Estate WordPress Theme < 4.4.1 - Authenticated (Subscriber+) Privilege Escalation
Slug
reality
Published
2019-09-08
Title
Reality < 2.4.0 - Multiple Persistent XSS
Slug
reality
Published
2020-01-16
Title
Reality < 2.5.3 - Unauthenticated Reflected XSS
Slug
reality
Published
2020-07-29
Title
Reality < 2.5.6 - Multiple Reflected Cross-Site Scripting (XSS)
Slug
realtyelite
Published
2025-06-25
Title
RealtyElite <= 1.0.0 - Unauthenticated Local File Inclusion
Slug
reconstruction
Published
2024-11-13
Title
ReConstruction <= 1.4.7 - Reflected Cross-Site Scripting
Slug
redart
Published
2025-06-26
Title
Red Art <= 3.7 - Authenticated (Subscriber+) PHP Object Injection
Slug
redline
Published
2011-09-27
Title
Redline < 1.66 - XSS
Slug
refraction
Published
2014-10-01
Title
Refraction Theme Multiple Vulnerabilities (XSS, FPD)
Slug
reganto-theme
Published
2014-08-01
Title
Reganto - Remote File Upload
Slug
regina-lite
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
regina-lite
Published
2023-03-13
Title
Regina Lite <= 2.0.7 - Reflected XSS
Slug
rehub-theme
Published
2024-04-03
Title
Rehub < 19.6.2 - Authenticated (Subscriber+) SQL Injection
Slug
rehub-theme
Published
2024-04-03
Title
Rehub < 19.6.2 - Authenticated (Editor+) Local File Inclusion
Slug
rehub-theme
Published
2024-04-03
Title
Rehub < 19.6.2 - Unauthenticated Local File Inclusion
Slug
rehub-theme
Published
2025-09-05
Title
Rehub < 19.9.8 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost
Slug
rehub-theme
Published
2025-09-05
Title
Rehub < 19.9.8 - Unauthenticated Password Protected Post Disclosure
Slug
rehub-theme
Published
2025-10-18
Title
Rehub < 19.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rehub-theme
Published
2025-12-06
Title
Rehub < 19.9.9.2 - Unauthenticated Information Exposure
Slug
relax-spa
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
resca
Published
2025-09-10
Title
Resca < 3.0.3 - Reflected Cross-Site Scripting
Slug
resido
Published
2025-03-13
Title
Resido - Real Estate WordPress Theme < 3.6.1 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update
Slug
responsive
Published
2024-03-28
Title
Responsive < 5.0.3 - Missing Authorization to HMTL Injection
Slug
responsive
Published
2024-06-03
Title
Responsive < 5.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
responsive-mobile
Published
2024-07-10
Title
Responsive Mobile <= 1.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting