WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
wabi-sabi
Published
2026-02-25
Title
Wabi-Sabi <= 1.2 - Unauthenticated Local File Inclusion
Slug
wallstreet
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
wanderic
Published
2025-08-23
Title
Wanderic <= 1.0.10 - Unauthenticated Local File Inclusion
Slug
wanderland
Published
2025-04-17
Title
Wanderland < 1.7.2 - Unauthenticated Local File Inclusion
Slug
wanderland
Published
2026-01-03
Title
Wanderland <= 1.5 - Missing Authorization
Slug
wanderland
Published
2026-03-03
Title
Wanderland - Travel Blog <= 1.5 - Unauthenticated Local File Inclusion
Slug
wastia
Published
2025-09-03
Title
Wastia < 1.1.3 - Unauthenticated Arbitrary File Upload
Slug
wd
Published
2025-08-19
Title
W&D <= 1.0 - Unauthenticated Local File Inclusion
Slug
wealthco
Published
2026-02-27
Title
WealthCo <= 2.18 - Unauthenticated Local File Inclusion
Slug
weaver-xtreme
Published
2023-04-05
Title
Weaver Xtreme Theme < 6.2 - Contributor+ Stored Cross-Site Scripting
Slug
weaver-xtreme
Published
2024-01-05
Title
Weaver Xtreme < 6.4 - Contributor+ Stored XSS
Slug
web-minimalist-200901
Published
2011-09-27
Title
Web Minimalist 200901 < 1.2 - XSS
Slug
webfolio
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
wedding-bride
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
weddingalbum
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
weedles
Published
2025-12-31
Title
Weedles <= 1.1.12 - Unauthenticated Local File Inclusion
Slug
weeklynews
Published
2015-05-03
Title
WeeklyNews Premium Theme < 2.2.9 - Cross-Site Scripting (XSS)
Slug
welldone
Published
2026-02-26
Title
Welldone - Sports Store WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
Slug
wellness
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wellspring
Published
2026-01-06
Title
Wellspring < 2.8 - Unauthenticated Local File Inclusion
Slug
welowe
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
werkstatt
Published
2026-01-19
Title
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Slug
westand
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
whimsy-framework
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
whiterabbit
Published
2025-08-19
Title
White Rabbit <= 1.5.2 - Unauthenticated PHP Object Injection