WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
wellspring
Published
2026-01-06
Title
Wellspring < 2.8 - Unauthenticated Local File Inclusion
Slug
welowe
Published
2025-01-06
Title
Multiple Themes by gavias - Reflected XSS
Slug
werkstatt
Published
2026-01-19
Title
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Slug
werkstatt
Published
2026-06-29
Title
Werkstatt - Creative Portfolio WordPress Theme <= 4.7.2 - Cross-Site Request Forgery
Slug
werkstatt
Published
2026-06-29
Title
Werkstatt - Creative Portfolio WordPress Theme <= 4.7.2 - Missing Authorization
Slug
werkstatt
Published
2026-06-30
Title
Werkstatt - Creative Portfolio WordPress Theme <= 4.8.3 - Authenticated (Contributor+) PHP Object Injection
Slug
werkstatt
Published
2026-10-07
Title
Werkstatt - Creative Portfolio WordPress Theme <= 4.8.3 - Unauthenticated Local File Inclusion
Slug
westand
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
whimsy-framework
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
whistle-sports-club
Published
2026-10-07
Title
Whistle - Sports Club <= 4.2 - Reflected Cross-Site Scripting
Slug
whiterabbit
Published
2025-08-19
Title
White Rabbit <= 1.5.2 - Unauthenticated PHP Object Injection
Slug
whitish-lite
Published
2025-03-24
Title
Whitish Lite <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wibar
Published
2020-11-30
Title
Wibar < 1.2.1 - Authenticated Stored Cross-Site Scripting
Slug
wibar
Published
2026-05-16
Title
Wibar <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wigi
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload
Slug
wiguard
Published
2026-02-17
Title
Wiguard < 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
williamson
Published
2026-02-27
Title
M.Williamson <= 1.2.11 - Unauthenticated Local File Inclusion
Slug
wilmer
Published
2025-05-21
Title
Wilmër < 3.4.2 - Unauthenticated Local File Inclusion
Slug
wilmer
Published
2025-12-15
Title
Wilmër < 3.5 - Authenticated (Contributor+) Local File Inclusion
Slug
window-ac-services
Published
2026-03-04
Title
AC Services | HVAC, Air Conditioning & Heating Company WordPress <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
windsor
Published
2026-02-27
Title
Windsor <= 2.5.0 - Unauthenticated Local File Inclusion
Slug
windsor
Published
2026-10-08
Title
Windsor - Apartment Complex Single Property WordPress Theme <= 2.10 - Unauthenticated PHP Object Injection
Slug
wine-house
Published
2026-10-09
Title
Wine House | Winery & Restaurant WordPress Theme <= 3.20 - Unauthenticated PHP Object Injection
Slug
wineshop
Published
2026-05-27
Title
WineShop - Food & Wine Store WordPress Theme <= 3.17 - Unauthenticated Local File Inclusion
Slug
wineshop
Published
2026-10-08
Title
WineShop - Food & Wine Store WordPress Theme <= 3.20 - Unauthenticated PHP Object Injection