WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
westand
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Slug
whimsy-framework
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
whiterabbit
Published
2025-08-19
Title
White Rabbit <= 1.5.2 - Unauthenticated PHP Object Injection
Slug
whitish-lite
Published
2025-03-24
Title
Whitish Lite <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wibar
Published
2020-11-30
Title
Wibar < 1.2.1 - Authenticated Stored Cross-Site Scripting
Slug
wigi
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload
Slug
wiguard
Published
2026-02-17
Title
Wiguard < 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
williamson
Published
2026-02-27
Title
M.Williamson <= 1.2.11 - Unauthenticated Local File Inclusion
Slug
wilmer
Published
2025-05-21
Title
Wilmër < 3.4.2 - Unauthenticated Local File Inclusion
Slug
wilmer
Published
2025-12-15
Title
Wilmër < 3.5 - Authenticated (Contributor+) Local File Inclusion
Slug
window-ac-services
Published
2026-03-04
Title
AC Services | HVAC, Air Conditioning & Heating Company WordPress <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
windsor
Published
2026-02-27
Title
Windsor <= 2.5.0 - Unauthenticated Local File Inclusion
Slug
winger
Published
2025-08-19
Title
Winger <= 1.0.16 - Unauthenticated Local File Inclusion
Slug
winnex
Published
2025-05-21
Title
Winnex <= 1.3.2 - Unauthenticated Local File Inclusion
Slug
winters
Published
2023-07-26
Title
Winters theme <= 1.4.3 - Reflected Cross-Site Scripting via Prototype Pollution
Slug
wireless-butler
Published
2025-04-11
Title
Wireless Butler <= 1.0.11 - Reflected Cross-Site Scripting
Slug
wise
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Slug
wishful-blog
Published
2023-09-05
Title
Raise Mag <= 1.0.7 and Wishful Blog <= 2.0.1 - Reflected XSS
Slug
wizors-investments
Published
2026-03-06
Title
Wizor's <= 2.12 - Unauthenticated Local File Inclusion
Slug
wlow
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
woffice
Published
2021-08-26
Title
Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles
Slug
woffice
Published
2024-07-01
Title
Woffice < 5.4.9 - Reflected Cross-Site Scripting
Slug
woffice
Published
2024-08-07
Title
Woffice < 5.4.12 - Unauthenticated Privilege Escalation
Slug
woffice
Published
2024-12-10
Title
Woffice < 5.4.15 - Unauthenticated Privilege Escalation
Slug
woffice
Published
2025-04-03
Title
Woffice < 5.4.22 - Authentication Bypass via Registration Role