WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
supreme-directory
Published
2018-08-19
Title
Supreme Directory Theme <= 1.1.8 - Unauthenticated Cross-Site Scripting (XSS)
Slug
sw_maxshop
Published
2025-12-30
Title
MaxShop <= 3.6.20 - Unauthenticated Local File Inclusion
Slug
swape
Published
2018-02-08
Title
Swape Theme - Authentication Bypass and Stored XSS
Slug
sweet-dessert
Published
2025-06-03
Title
Sweet Dessert < 1.1.13 - Unauthenticated PHP Object Injection
Slug
sweetdate
Published
2024-12-03
Title
Sweet Date < 3.8.0 - Unauthenticated Privilege Escalation
Slug
sweetdate
Published
2026-02-23
Title
Sweet Date < 4.0.1 - Unauthenticated PHP Object Injection
Slug
sweetjane
Published
2026-01-02
Title
Sweet Jane <= 1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
sweetjane
Published
2026-02-25
Title
Sweet Jane - Delightful Cake Shop Theme <= 1.2 - Unauthenticated Local File Inclusion
Slug
swing-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
switchblade
Published
2014-08-01
Title
Switchblade 1.3 - Arbitrary File Upload
Slug
sydney
Published
2025-09-16
Title
Sydney < 2.57 - Missing Authorization to Authenticated (Subscriber+) Limited Theme Options Update