WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
socialdriver
Published
2023-09-11
Title
Socialdriver < 2024 - Prototype Pollution to XSS
Slug
sociallyviral
Published
2024-07-09
Title
SociallyViral <= 1.0.10 - Cross-Site Request Forgery
Slug
socialv
Published
2025-02-03
Title
SocialV - Social Network and Community BuddyPress Theme < 2.0.16 - Missing Authorization to Arbitrary File Download
Slug
sofass
Published
2025-06-23
Title
Sofass <= 1.3.4 - Unauthenticated Local File Inclusion
Slug
softme
Published
2025-09-05
Title
SoftMe <= 1.1.27 - Missing Authorization
Slug
soho-hotel
Published
2025-06-04
Title
Soho Hotel <= 4.2.5 - Reflected Cross-Site Scripting
Slug
solar
Published
2025-05-30
Title
Solar Energy <= 3.5 - Authenticated (Subscriber+) PHP Object Injection
Slug
soledad
Published
2022-10-30
Title
Soledad < 8.2.6 - Subscriber+ Cross-Site Scripting
Slug
soledad
Published
2022-09-13
Title
Soledad < 8.2.5 - Reflected Cross-site Scripting
Slug
soledad
Published
2023-12-05
Title
Soledad < 8.4.2 - Unauthenticated PHP Object Injection
Slug
soledad
Published
2023-12-05
Title
Soledad < 8.4.2 - Authenticated (Contributor+) SQL Injection
Slug
soledad
Published
2023-12-05
Title
Soledad < 8.4.2 - Reflected Cross-Site Scripting
Slug
soledad
Published
2024-04-09
Title
Soledad < 8.4.6 - Missing Authorization
Slug
soledad
Published
2024-04-09
Title
Soledad < 8.4.6 - Missing Authorization
Slug
soledad
Published
2024-04-09
Title
Soledad < 8.4.6 - Cross-Site Request Forgery
Slug
soledad
Published
2024-12-05
Title
Soledad < 8.6.0 - Unauthenticated Limited Local File Inclusion
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Unauthenticated Arbitrary Shortcode Execution
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Slug
soledad
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Local File Inclusion
Slug
soledad
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
soledad
Published
2025-10-23
Title
Soledad < = 8.6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
soledad
Published
2025-10-28
Title
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
Slug
soleil
Published
2025-08-19
Title
Soleil <= 1.17 - Unauthenticated Local File Inclusion
Slug
sominx
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS