WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
sarada-lite
Published
2024-04-10
Title
Sarada Lite < 1.1.3 - Cross-Site Request Forgery to Notice Dismissal
Slug
satoshi
Published
2014-12-06
Title
Satoshi Theme <= 2.0 - File Upload CSRF
Slug
saul
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
save-life
Published
2026-02-27
Title
Save Life <= 1.2.13 - Unauthenticated Local File Inclusion
Slug
saveo
Published
2026-02-17
Title
Saveo <= 1.1.2 - Unauthenticated Local File Inclusion
Slug
savory
Published
2025-10-18
Title
Savory < 2.6 - Unauthenticated Local File Inclusion
Slug
savoy
Published
2025-08-14
Title
Savoy < 3.0.9 - Unauthenticated Information Exposure
Slug
saxon
Published
2025-07-22
Title
Saxon - Viral Content Blog & Magazine Marketing WordPress <= 1.9.3 - Unauthenticated Local File Inclusion
Slug
scape
Published
2025-09-07
Title
Scape <= 1.5.13 - Unauthenticated PHP Object Injection
Slug
scape
Published
2026-03-20
Title
Scape - Multipurpose WordPress theme < 1.5.16 - Unauthenticated Arbitrary File Deletion
Slug
scarlet
Published
2014-08-01
Title
scarlet <= 1.1.3 - XSS in ZeroClipboard.swf
Slug
scientia
Published
2026-03-02
Title
Scientia <= 1.2.4 - Unauthenticated Local File Inclusion
Slug
scoreme
Published
2016-04-04
Title
ScoreMe Theme - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
scrollme
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
scv1
Published
2014-08-01
Title
SCv1 - download.php file Parameter Traversal Remote File Access
Slug
scylla-lite
Published
2024-06-27
Title
Scylla lite <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
Slug
seabird
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
seabird
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
sean-lite
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
search-and-go
Published
2025-10-08
Title
Search & Go < 2.8 - Authentication Bypass to Privilege Escalation
Slug
search-and-go
Published
2026-01-12
Title
Search & Go <= 2.8 - Unauthenticated Local File Inclusion
Slug
searchgo
Published
2026-03-13
Title
Search & Go < 2.8.1 - Authenticated (Subscriber+) Privilege Escalation
Slug
seil
Published
2025-05-08
Title
Seil <= 1.7.1 - Unauthenticated PHP Object Injection
Slug
selio
Published
2019-09-08
Title
Selio - Real Estate Directory <= 1.1 - SQL Injection & Persistent XSS
Slug
septera
Published
2024-09-16
Title
Septera <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting