WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
vidmov
Published
2026-01-02
Title
VidMov < 2.3.9 - Authenticated (Subscriber+) Path Traversal
Slug
vidorev
Published
2026-02-04
Title
VidoRev <= 2.9.9.9.9.9.7 - Unauthenticated Local File Inclusion
Slug
vikinger
Published
2025-04-24
Title
Vikinger < 1.9.31 - Authenticated (Subscriber+) Privilege Escalation via 'vikinger_user_meta_update_ajax'
Slug
vikinger
Published
2025-07-01
Title
Vikinger < 1.9.33 - Authenticated (Subscriber+) Arbitrary File Deletion via vikinger_delete_activity_media_ajax Function
Slug
villar
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
villar
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
vilva
Published
2024-06-20
Title
Vilva < 1.2.3 - Cross-Site Request Forgery to Notice Dismissal
Slug
vintwood
Published
2026-03-20
Title
VintWood < 1.1.9 - Unauthenticated Local File Inclusion
Slug
viralike
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
viralike
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
vireo
Published
2025-12-31
Title
Vireo <= 1.0.24 - Missing Authorization
Slug
virtue
Published
2024-04-25
Title
Virtue < 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
Slug
visual-arts
Published
2025-07-15
Title
Visual Art | Gallery WordPress Theme <= 2.4 - Authenticated (Subscriber+) PHP Object Injection
Slug
visual-composer-starter
Published
2024-08-12
Title
Visual Composer Starter < 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vithy
Published
2014-08-01
Title
vithy - Full Path Disclosure
Slug
vithy
Published
2014-08-01
Title
vithy - Arbitrary File Upload
Slug
vithy
Published
2014-08-01
Title
vithy - Custom Background Shell Upload
Slug
vivagh
Published
2026-01-13
Title
Vivagh <= 2.4 - Authenticated (Subscriber+) PHP Object Injection
Slug
vixus
Published
2026-03-02
Title
Vixus - Business Startup Elementor Template Kit <= 1.0.16 - Unauthenticated Local File Inclusion
Slug
vizeon
Published
2025-05-21
Title
Vizeon - Business Consulting < 1.2.1 - Unauthenticated Local File Inclusion
Slug
vmag
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
vmagazine-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
vmagazine-news
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
vocal
Published
2025-09-02
Title
Vocal <= 1.12 - Unauthenticated Local File Inclusion
Slug
voice
Published
2021-03-24
Title
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion