WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
soledad
Published
2024-12-05
Title
Soledad < 8.6.0 - Unauthenticated Limited Local File Inclusion
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Unauthenticated Arbitrary Shortcode Execution
Slug
soledad
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Slug
soledad
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Local File Inclusion
Slug
soledad
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
soledad
Published
2025-10-23
Title
Soledad < = 8.6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
soledad
Published
2025-10-28
Title
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
Slug
soledad
Published
2026-01-10
Title
Soledad <= 8.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
soleil
Published
2025-08-19
Title
Soleil <= 1.17 - Unauthenticated Local File Inclusion
Slug
soleng
Published
2026-02-17
Title
Soleng <= 1.0.5 - Unauthenticated Local File Inclusion
Slug
sominx
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
sonaar
Published
2025-10-06
Title
Sonaar < 4.27.5 - Unauthenticated Stored Cross-Site Scripting
Slug
sonaar
Published
2025-10-06
Title
Sonaar < 4.27.5 - Subscriber+ Privilege Escalation
Slug
soulmedic
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
soulmedic
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
soundblast
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
soundpress
Published
2019-10-09
Title
SoundPress < 3.0.0 - Cross-Site Scripting (XSS)
Slug
source
Published
2014-08-01
Title
Source - VideoJS Cross-Site Scripting
Slug
spa-and-salon
Published
2024-04-10
Title
Spa and Salon < 1.2.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
spa-and-salon
Published
2026-02-18
Title
Spa and Salon < 1.3.3 - Missing Authorization
Slug
spabiz
Published
2025-04-11
Title
SpaBiz <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spacious
Published
2025-08-21
Title
Spacious < 1.9.12 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import
Slug
spare
Published
2025-05-16
Title
Spare <= 1.7 - Cross-Site Request Forgery
Slug
spare
Published
2025-06-04
Title
Spare <= 1.7 - Reflected Cross-Site Scripting