WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
wallstreet
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
weaver-xtreme
Published
2023-04-05
Title
Weaver Xtreme Theme < 6.2 - Contributor+ Stored Cross-Site Scripting
Slug
weaver-xtreme
Published
2024-01-05
Title
Weaver Xtreme < 6.4 - Contributor+ Stored XSS
Slug
web-minimalist-200901
Published
2011-09-27
Title
Web Minimalist 200901 < 1.2 - XSS
Slug
webfolio
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
wedding-bride
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
weddingalbum
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
weeklynews
Published
2015-05-03
Title
WeeklyNews Premium Theme < 2.2.9 - Cross-Site Scripting (XSS)
Slug
wellness
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
westand
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
whimsy-framework
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wibar
Published
2020-11-30
Title
Wibar < 1.2.1 - Authenticated Stored Cross-Site Scripting
Slug
winters
Published
2023-07-26
Title
Winters theme <= 1.4.3 - Reflected Cross-Site Scripting via Prototype Pollution
Slug
wise
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
wishful-blog
Published
2023-09-05
Title
Raise Mag <= 1.0.7 and Wishful Blog <= 2.0.1 - Reflected XSS
Slug
wlow
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
woffice
Published
2021-08-26
Title
Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles
Slug
woodmart
Published
2023-02-16
Title
WoodMart < 7.1.2 - Unauthenticated Arbitrary Shortcode Injection
Slug
woodmart
Published
2023-02-28
Title
WoodMart < 7.1.2 - License Update/Deactivation via CSRF
Slug
woodmart
Published
2023-05-11
Title
WoodMart < 7.2.2 - Subscriber+ Stored XSS
Slug
woodmart
Published
2023-09-25
Title
WoodMart < 7.2.5 - Reflected XSS
Slug
woohoo
Published
2023-10-27
Title
WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF
Slug
woostify
Published
2021-07-02
Title
Woostify < 1.9.2 - CSRF Bypass
Slug
workio
Published
2020-07-13
Title
Workio – Job Board < 1.0.3 - Unauthenticated Reflected XSS
Slug
workreap
Published
2021-07-02
Title
Workreap < 2.2.2 - Missing Authorization Checks in Ajax Actions