WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
wallstreet
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
wanderland
Published
2025-04-17
Title
Wanderland < 1.7.2 - Unauthenticated Local File Inclusion
Slug
wastia
Published
2025-09-03
Title
Wastia < 1.1.3 - Unauthenticated Arbitrary File Upload
Slug
weaver-xtreme
Published
2023-04-05
Title
Weaver Xtreme Theme < 6.2 - Contributor+ Stored Cross-Site Scripting
Slug
weaver-xtreme
Published
2024-01-05
Title
Weaver Xtreme < 6.4 - Contributor+ Stored XSS
Slug
web-minimalist-200901
Published
2011-09-27
Title
Web Minimalist 200901 < 1.2 - XSS
Slug
webfolio
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
wedding-bride
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
weddingalbum
Published
2015-05-15
Title
ThemeMakers Themes - Information Disclosure
Slug
weeklynews
Published
2015-05-03
Title
WeeklyNews Premium Theme < 2.2.9 - Cross-Site Scripting (XSS)
Slug
wellness
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
welowe
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
westand
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
whimsy-framework
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
whiterabbit
Published
2025-08-19
Title
White Rabbit <= 1.5.2 - Unauthenticated PHP Object Injection
Slug
whitish-lite
Published
2025-03-24
Title
Whitish Lite <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wibar
Published
2020-11-30
Title
Wibar < 1.2.1 - Authenticated Stored Cross-Site Scripting
Slug
wigi
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload
Slug
wilmer
Published
2025-05-21
Title
Wilmër < 3.4.2 - Unauthenticated Local File Inclusion
Slug
winnex
Published
2025-05-21
Title
Winnex <= 1.3.2 - Unauthenticated Local File Inclusion
Slug
winters
Published
2023-07-26
Title
Winters theme <= 1.4.3 - Reflected Cross-Site Scripting via Prototype Pollution
Slug
wireless-butler
Published
2025-04-11
Title
Wireless Butler <= 1.0.11 - Reflected Cross-Site Scripting
Slug
wise
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
wishful-blog
Published
2023-09-05
Title
Raise Mag <= 1.0.7 and Wishful Blog <= 2.0.1 - Reflected XSS
Slug
wlow
Published
2023-08-14
Title
Multiple Themes - Reflected XSS