WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
saul
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
saveo
Published
2026-02-17
Title
Saveo <= 1.1.2 - Unauthenticated Local File Inclusion
Slug
savory
Published
2025-10-18
Title
Savory < 2.6 - Unauthenticated Local File Inclusion
Slug
savoy
Published
2025-08-14
Title
Savoy < 3.0.9 - Unauthenticated Information Exposure
Slug
saxon
Published
2025-07-22
Title
Saxon - Viral Content Blog & Magazine Marketing WordPress <= 1.9.3 - Unauthenticated Local File Inclusion
Slug
scape
Published
2025-09-07
Title
Scape <= 1.5.13 - Unauthenticated PHP Object Injection
Slug
scarlet
Published
2014-08-01
Title
scarlet <= 1.1.3 - XSS in ZeroClipboard.swf
Slug
scoreme
Published
2016-04-04
Title
ScoreMe Theme - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
scrollme
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
scv1
Published
2014-08-01
Title
SCv1 - download.php file Parameter Traversal Remote File Access
Slug
scylla-lite
Published
2024-06-27
Title
Scylla lite <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
seabird
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
seabird
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
sean-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
search-and-go
Published
2025-10-08
Title
Search & Go < 2.8 - Authentication Bypass to Privilege Escalation
Slug
search-and-go
Published
2026-01-12
Title
Search & Go <= 2.8 - Unauthenticated Local File Inclusion
Slug
seil
Published
2025-05-08
Title
Seil <= 1.7.1 - Unauthenticated PHP Object Injection
Slug
selio
Published
2019-09-08
Title
Selio - Real Estate Directory <= 1.1 - SQL Injection & Persistent XSS
Slug
septera
Published
2024-09-16
Title
Septera <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sevenhills
Published
2026-02-03
Title
SevenHills <= 1.6.2 - Unauthenticated PHP Object Injection
Slug
sevenstars
Published
2025-05-16
Title
Seven Stars <= 1.4.4 - Cross-Site Request Forgery
Slug
sevenstars
Published
2025-06-23
Title
Seven Stars <= 1.4.4 - Reflected Cross-Site Scripting
Slug
seventrees
Published
2026-02-17
Title
SevenTrees <= 1.0.2 - Unauthenticated Local File Inclusion
Slug
shapeless
Published
2014-08-01
Title
Shapeless - Unspecified XSS
Slug
shapely
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection