WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
t1
Published
2023-07-19
Title
T1 theme <= 19.0 - Open Redirect
Slug
tacticool
Published
2025-08-22
Title
Tacticool <= 1.0.13 - Unauthenticated Local File Inclusion
Slug
tails
Published
2025-12-31
Title
Tails <= 1.4.12 - Unauthenticated Local File Inclusion
Slug
taina
Published
2025-04-02
Title
Tainá < 0.2.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
tainacan-interface
Published
2024-04-15
Title
Tainacan Interface < 2.7.2 - Reflected Cross-Site Scripting
Slug
takeout
Published
2025-08-23
Title
Takeout <= 1.3.0 - Unauthenticated Local File Inclusion
Slug
tantum
Published
2025-12-31
Title
TanTum <= 1.1.13 - Unauthenticated Local File Inclusion
Slug
tantyyellow
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
tantyyellow
Published
2025-01-17
Title
Tantyyellow <= 1.0.0.5 - Reflected Cross-Site Scripting
Slug
tastyc
Published
2025-04-15
Title
Tastyc < 2.5.2 - Unauthenticated Local File Inclusion
Slug
teardrop
Published
2015-06-26
Title
Multiple Themes - Privilige Escalation
Slug
techism
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tediss
Published
2026-03-02
Title
Tediss <= 1.2.4 - Unauthenticated Local File Inclusion
Slug
temp-mail-x
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tempera
Published
2024-08-26
Title
Tempera <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tennis-sportclub
Published
2026-02-23
Title
Tennis SportClub - Tennis Sports Events WordPress Theme <= 1.2.3 - Unauthenticated PHP Object Injection
Slug
tevily
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
th-shop-mania
Published
2024-11-08
Title
Th Shop Mania < 1.5.0 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
the-authority
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
the-conference
Published
2024-04-10
Title
The Conference < 1.2.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
the-launcher
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
the-league
Published
2026-03-17
Title
The League <= 4.4.1 - Missing Authorization
Slug
the-monday
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
the-mounty
Published
2026-02-25
Title
The Mounty | Hiking Campground & Children Camping WordPress Theme <= 1.1 - Unauthenticated Local File Inclusion
Slug
the-next
Published
2024-08-07
Title
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection