WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
saul
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
savory
Published
2025-10-18
Title
Savory < 2.6 - Unauthenticated Local File Inclusion
Slug
savoy
Published
2025-08-14
Title
Savoy < 3.0.9 - Unauthenticated Information Exposure
Slug
saxon
Published
2025-07-22
Title
Saxon - Viral Content Blog & Magazine Marketing WordPress <= 1.9.3 - Unauthenticated Local File Inclusion
Slug
scape
Published
2025-09-07
Title
Scape <= 1.5.13 - Unauthenticated PHP Object Injection
Slug
scarlet
Published
2014-08-01
Title
scarlet <= 1.1.3 - XSS in ZeroClipboard.swf
Slug
scoreme
Published
2016-04-04
Title
ScoreMe Theme - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
scrollme
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
scv1
Published
2014-08-01
Title
SCv1 - download.php file Parameter Traversal Remote File Access
Slug
scylla-lite
Published
2024-06-27
Title
Scylla lite <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
seabird
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
seabird
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
sean-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
search-and-go
Published
2025-10-08
Title
Search & Go < 2.8 - Authentication Bypass to Privilege Escalation
Slug
seil
Published
2025-05-08
Title
Seil <= 1.7.1 - Unauthenticated PHP Object Injection
Slug
selio
Published
2019-09-08
Title
Selio - Real Estate Directory <= 1.1 - SQL Injection & Persistent XSS
Slug
septera
Published
2024-09-16
Title
Septera <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sevenstars
Published
2025-05-16
Title
Seven Stars <= 1.4.4 - Cross-Site Request Forgery
Slug
sevenstars
Published
2025-06-23
Title
Seven Stars <= 1.4.4 - Reflected Cross-Site Scripting
Slug
shapeless
Published
2014-08-01
Title
Shapeless - Unspecified XSS
Slug
shapely
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
shieldgroup
Published
2025-09-05
Title
ShieldGroup <= 2.13 - Unauthenticated Local File Inclusion
Slug
shk-corporate
Published
2025-09-05
Title
Shk Corporate <= 2.4.1.1 - Missing Authorization
Slug
shopbiz-lite
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
shopo
Published
2025-04-01
Title
Multiple Themify Themes - Reflected Cross-Site Scripting