https://wordsec.net/vulnerabilities/themes/webenvo/webenvo-006-authenticated-subscriber-arbitrary-file-upload 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ziston/ziston-145-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ekoterra/ekoterra-nonprofit-ecology-theme-100-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/claue/claue-clean-minimal-elementor-woocommerce-227-reflected-cross-site-scripting 2026-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-334-cross-site-request-forgery 2023-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aihub/liquidthemes-themes-various-versions-missing-authorization-to-authenticated-subscriber-all-plugins-deactivated 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dreamer-blog/dreamer-blog-12-missing-authorization 2026-01-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/my-engine/my-flatonica-008-my-wooden-under-construction-207-reflected-cross-site-scripting 2024-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandwedding/grand-wedding-3111-unauthenticated-php-object-injection 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reprizo/reprizo-108-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/entrada/entrada-577-unauthenticated-sql-injection 2025-05-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/silesia/silesia-106-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-06-27T18:53:42.000Z https://wordsec.net/vulnerabilities/themes/stallion/stallion-117-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogpoet/blogpoet-102-missing-authorization-via-blogpoet_install_and_activate_plugins 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/intrepidity/intrepidity-151-cross-site-request-forgery-via-mytheme_add_admin 2023-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kormosala/kormosala-1022-reflected-cross-site-scripting 2020-07-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/citygov/citygov-19-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mr-cobbler/mr-cobbler-custom-shoemaking-footwear-repairs-wordpress-theme-119-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/buddyapp/buddyapp-192-reflected-cross-site-scripting 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spicepress/spicepress-2325-cross-site-request-forgery 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pathfinder/pathfinder-116-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cardealer/car-dealer-automotive-wordpress-theme-responsive-167-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snsevon/evon-34-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/attorney/attorney-3-reflected-cross-site-scripting 2023-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/doctreat/doctreat-167-reflected-cross-site-scripting 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/car-repair-services/car-repair-services-50-unauthenticated-server-side-request-forgery 2025-06-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/udesign/udesign-4112-missing-authorization 2025-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/picturefactory/picture-factory-unspecified-versions-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2077-authenticated-contributor-stored-cross-site-scripting 2024-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vidmov/vidmov-194-unauthenticated-local-file-inclusion 2025-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woffice/woffice-5410-unauthenticated-privilege-escalation 2024-08-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/diza/diza-139-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/optimizewp/optimize-24-unauthenticated-local-file-inclusion 2026-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-711-cross-site-request-forgery-to-license-update 2023-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/geoplaces4beta/geoplaces-4-arbitrary-file-upload 2013-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2033-authenticated-contributor-stored-cross-site-scripting 2024-04-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/urna/urna-2512-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neobeat/neobeat-12-unauthenticated-local-file-inclusion 2026-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neptunus/neptunus-1011-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spacious/spacious-1911-missing-authorization-to-autheticated-subscriber-demo-data-import 2025-08-21T22:13:50.000Z https://wordsec.net/vulnerabilities/themes/capella/capella-255-unauthenticated-php-object-injection 2026-01-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/selio/selio-real-estate-directory-11-sql-injection 2019-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greeny/greeny-26-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/faith-hope/faith-hope-2130-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dsk/dsk-24-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-320-unauthenticated-sql-injection 2025-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/triton-lite/triton-lite-13-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-09-12T21:33:13.000Z https://wordsec.net/vulnerabilities/themes/diplomat/diplomat-theme-101-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/malta/malta-133-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coworking/coworking-161-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/puca/puca-2639-authenticated-contributor-local-file-inclusion 2025-12-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/saico/saico-102-arbitrary-file-upload 2013-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/arlo/arlo-603-unauthenticated-local-file-inclusion 2025-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-271-privilege-escalation 2023-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/streamit/streamit-402-authenticated-subscriber-privilege-escalation-via-user-email-changeaccount-takeover 2025-04-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brookside/brookside-14-reflected-cross-site-scripting 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goldenblatt/goldenblatt-130-unauthenticated-php-object-injection 2025-09-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kidszone/kids-zone-children-wordpress-54-unauthenticated-stored-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/artrium/artrium-1014-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/issabella/issabella-112-unauthenticated-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-booking/travel-booking-139-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-243-limited-authentication-bypass-due-to-missing-empty-value-check 2025-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/equadio/equadio-113-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spabiz/spabiz-1018-authenticated-contributor-stored-cross-site-scripting 2025-04-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/BuilderChild-Depot/ithemes-builder-depot-theme-5030-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogprise/blogprise-109-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fribbo/fribbo-110-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kamperen/kamperen-13-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/construct/construct-14-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/amfissa/amfissa-11-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nuance/nuance-12-arbitrary-file-upload 2013-01-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-chocolate/chocolate-wp-responsive-photography-theme-all-versions-cross-site-scripting 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wootique/woothemes-wooframework-5310-remote-code-execution-via-shortcodes 2012-04-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pool/pool-107-reflected-cross-site-scripting 2007-08-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hanani/hanani-1211-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5811-missing-authorization 2023-05-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lymcoin/lymcoin-1312-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/uncode/uncode-2944-reflected-cross-site-scripting 2025-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/boldy/site5-various-affected-themes-various-versions-email-spoofing 2012-07-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/i-transform/i-transform-309-cross-site-request-forgery 2024-07-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/noo-jobmonster-466-sensitive-information-disclosure-via-directory-listing 2020-09-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/patricia-lite/patricia-lite-123-cross-site-request-forgery 2024-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-1432-authenticated-contributor-stored-cross-site-scripting-via-shortcode-link-parameter 2026-05-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himer/wpqa-builder-forms-addon-for-wordpress-592-himer-193-and-discy-553-authenticated-subscriber-insecure-direct-object-reference 2022-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/buzzstone/buzz-stone-magazine-viral-blog-wordpress-102-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-portfolio/vw-portfolio-133-missing-authorization 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jupiter/jupiterx-theme-206-and-jupiter-theme-6101-authenticated-path-traversal-and-local-file-inclusion 2022-05-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snowmountain/snow-mountain-143-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/f8-lite/f8-lite-421-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/triompher/triompher-golf-course-sports-club-wordpress-theme-110-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bw-petito/petito-164-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/easybook/cththemes-citybook-234-townhub-106-easybook-122-themes-authenticated-post-deleition-via-idor 2019-12-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-324-authenticated-subscriber-privilege-escalation 2024-09-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/counterpoint/counterpoint-181-reflected-cross-site-scripting 2024-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woostify/woostify-191-cross-site-request-forgery 2021-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/parkivia/parkivia-119-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tiger-claw/tiger-claw-1114-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aihub/aihub-137-unauthenticated-arbitrary-file-upload-in-generate_image 2025-04-18T14:37:49.000Z https://wordsec.net/vulnerabilities/themes/tooth-fairy/tooth-fairy-dentist-dental-clinic-wordpress-theme-116-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soleil/soleil-117-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magazine-edge/magazine-edge-113-authenticated-subscriber-arbitrary-plugin-activation 2023-02-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-868-authenticated-contributor-local-file-inclusion 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenmart/greenmart-organic-food-woocommerce-wordpress-theme-243-reflected-cross-site-scripting 2020-07-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandphotography/grand-photography-wordpress-578-unauthenticated-php-object-injection 2026-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandcarrental/grand-car-rental-369-cross-site-request-forgery 2026-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aora/aora-139-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gridiron/gridiron-1014-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oyster/oyster-photography-wordpress-443-unauthenticated-stored-cross-site-scripting 2026-01-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandphotography/grand-photography-wordpress-578-reflected-cross-site-scripting 2026-07-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/denticare/denticare-143-unauthenticated-php-object-injection 2025-09-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lobo/lobo-286-missing-authorization 2025-11-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ona/ona-126-authenticated-administrator-blind-server-side-request-forgery-via-download_link-parameter 2026-05-01T16:42:01.000Z https://wordsec.net/vulnerabilities/themes/busiprof/busiprof-248-authenticated-contributor-stored-cross-site-scripting 2024-08-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/luxedrive/luxedrive-limousine-and-car-rental-wordpress-theme-14-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jannah/jannah-newspaper-magazine-news-buddypress-amp-544-reflected-cross-site-scripting 2021-06-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gillion/gillion-413-missing-authorization 2026-07-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/build/build-103-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/interface/interface-310-authenticated-contributor-stored-cross-site-scripting 2024-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-league/the-league-441-missing-authorization 2026-03-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/christine-miller/miller-133-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bw-craftxtore/craftxtore-17-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/education-zone/education-zone-134-cross-site-request-forgery-to-notice-dismissal 2024-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogty/blogty-1011-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flipmart/flipmart-28-missing-authorization 2026-05-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/arkhe/arkhe-3110-cross-site-request-forgery-to-local-file-inclusion 2025-04-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nrgbusiness/the-business-161-missing-authorization 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wpresidence/wpresidence-532-missing-authorization 2025-10-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/automotive/automotive-car-dealership-business-wordpress-theme-134-authenticated-contributor-stored-cross-site-scripting-via-call-to-action-fields 2026-02-26T18:08:31.000Z https://wordsec.net/vulnerabilities/themes/findgo/findgo-1331-cross-site-scripting 2020-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sparky/sparky-10-cross-site-scripting 2012-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fwdevp/easy-video-player-wordpress-woocommerce-100-unauthenticated-arbitrary-file-download 2025-07-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/little-birdies/little-birdies-multipurpose-children-psd-template-1316-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-responsive-multi-purpose-theme-421-information-exposure 2018-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/silverorchid/silverorchid-150-cross-site-scripting 2013-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-721-missing-authorization 2023-05-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elessi-theme/elessi-639-reflected-cross-site-scripting 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lighthouseschool/lighthouse-1212-unauthenticated-local-file-inclusion 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kalium/kalium-329-missing-authorization-to-unauthenticated-mail-relay-via-kalium_vc_contact_form_request 2026-01-15T01:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-712-authenticated-contributor-stored-cross-site-scripting 2025-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aromatica/aromatica-18-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lovetravel/love-travel-10-19-reflected-cross-site-scripting-and-cross-frame-scripting 2020-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/corpkit/corpkit-20-authenticated-subscriber-local-file-inclusion 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/roam/roam-211-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/billey/billey-218-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-938-missing-authorization 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gecko/gecko-198-unauthenticated-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tint/tint-17-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/valen/valen-sport-fashion-woocommerce-wordpress-theme-24-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kleo/kleo-544-missing-authorization 2025-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hara/hara-1217-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-564-reflected-cross-site-scripting 2023-11-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photocrati-theme/photocrati-theme-40-sql-injection 2011-09-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/moderno/moderno-143-unauthenticated-php-object-injection 2026-06-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-299-missing-authorization 2025-11-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/corpiva/corpiva-1096-cross-site-request-forgery 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shk-corporate/shk-corporate-2411-missing-authorization 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-741-reflected-cross-site-scripting 2021-09-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vithy/vithy-unknown-versions-full-path-disclosure 2012-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cerebrum/cerebrum-112-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/basil/basil-1312-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-multi-purpose-responsive-woocommerce-theme-3187-authenticated-contributor-stored-cross-site-scripting-via-multiple-shortcodes 2024-06-21T13:15:56.000Z https://wordsec.net/vulnerabilities/themes/dukamarket/dukamarket-130-unauthenticated-arbitrary-shortcode-execution 2026-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aeroland/aeroland-166-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/feather12/feather12-unkown-versions-multiple-vulnerabilities 2013-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/euclid/euclid-all-versions-cross-site-request-forgery 2013-11-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/twenty-twelve-edd/easy-digital-downloads-edd-twenty-twelve-111-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wpjobster/wpjobster-635-unauthenticated-sql-injection 2026-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smartfix/smartfix-124-missing-authorization 2026-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wabi-sabi/wabi-sabi-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bimber/bimber-viral-magazine-wordpress-theme-925-authenticated-contributor-local-file-inclusion 2025-05-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kicker/kicker-220-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woo-tour/wootour-363-reflected-cross-site-scripting 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flixita/flixita-1082-reflected-cross-site-scripting-via-id-parameter 2024-12-05T14:50:57.000Z https://wordsec.net/vulnerabilities/themes/healthhub/healthhub-130-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegig/the-gig-1180-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kleo/kleo-544-reflected-cross-site-scripting 2024-12-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3205-missing-authorization 2026-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/apuslisting/apuslisting-1263-cross-site-request-forgery 2026-02-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/digital-download/digital-download-114-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vino/vino-19-authenticated-contributor-local-file-inclusion 2026-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unicamp/unicamp-university-and-college-wordpress-theme-222-authenticated-subscriber-sql-injection 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/polka-dots/polka-dots-12-reflected-cross-site-scripting 2025-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/popularis-verse/popularis-verse-101-cross-site-request-forgery 2024-07-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/crafts-and-arts/crafts-arts-25-authenticated-subscriber-php-object-injection 2025-05-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elegance/elegance-24-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate/real-estate-by-templatic-unknown-version-cross-site-request-forgery-to-arbitrary-file-upload 2014-03-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realhomes/realhomes-436-unauthenticated-privilege-escalation 2025-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/viral-news/multiple-themes-various-versions-missing-authorization-to-arbitrary-plugin-activation 2023-05-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/run-gran/run-gran-20-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-839-unauthenticated-sensitive-information-exposure 2026-02-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-334-reflected-cross-site-scripting-via-ct_additional_features 2023-02-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/onelife/onelife-39-authenticated-subscriber-php-object-injection 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unica/unica-event-planning-wedding-wordpress-theme-141-unauthenticated-local-file-inclusion 2026-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tantyyellow/tantyyellow-1005-reflected-cross-site-scripting 2025-01-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/holding_pattern/holding-pattern-06-arbitrary-file-upload 2015-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/green-planet/green-planet-environmental-non-profit-wordpress-theme-1114-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/petclub/pets-club-23-unauthenticated-php-object-injection 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-475-unauthenticated-privilege-escalation 2024-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-181-cross-site-request-forgery-via-reset_settings 2024-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/etchy/etchy-10-unauthenticated-local-file-inclusion 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/restaurant-cafeteria/restaurant-cafeteria-046-missing-authorization-to-subscriber-arbitrary-plugin-installationactivation 2026-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/real-estate-directory/real-estate-directory-104-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-activation 2023-03-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/moments/moments-22-unauthenticated-local-file-inclusion 2026-03-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magze/magze-109-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listeo/listeo-208-authenticated-contributor-stored-cross-site-scripting-via-soundcloud-shortcode 2025-10-24T17:11:49.000Z https://wordsec.net/vulnerabilities/themes/hmd/hmd-20-reflected-cross-site-scripting 2024-12-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/festy/festy-1130-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/themify-ultra/themify-ultra-735-authenticated-subscriber-php-object-injection 2023-10-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem-elementor/thegem-elementor-51051-unauthenticated-stored-cross-site-scripting 2025-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pinboard/pinboard-1110-cross-site-scripting 2013-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19953-authenticated-subscriber-sql-injection 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-303-reflected-cross-site-scripting 2020-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/winnex/winnex-132-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/palladio/palladio-1110-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/acerola/acerola-165-missing-authorization 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lasa/lasa-11-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/education-lms/education-lms-007-authenticated-contributor-stored-cross-site-scripting 2025-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/extra/elegantthemes-123-privilege-escalation 2016-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nexos/nexos-real-estate-17-reflected-cross-site-scripting 2020-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mesmerize/mesmerize-16120-cross-site-request-forgery-to-cache-clearing 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woffice/woffice-crm-5431-missing-authorization 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gravel/gravel-16-reflected-cross-site-scripting 2025-04-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rosaleen/rosaleen-28-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/emaurri/emaurri-101-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/benevolent/benevolent-139-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-learning-management-system-for-wordpress-4962-unauthenticated-arbitrary-file-read-and-deletion 2024-11-08T17:34:40.000Z https://wordsec.net/vulnerabilities/themes/eona/eona-13-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/formula/formula-051-reflected-cross-site-scripting-via-ti_customizer_notify_dismiss_recommended_plugins 2024-06-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19953-authenticated-instructor-sql-injection 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ludos-paradise/ludos-paradise-213-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/power-mag/power-mag-115-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homeo/homeo-1259-authenticated-contributor-local-file-inclusion 2026-02-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/revivenews/revivenews-102-missing-authorization-via-revivenews_install_and_activate_plugins 2024-08-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soho/soho-photography-wordpress-303-unauthenticated-stored-cross-site-scripting 2026-01-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/maxify/maxify-1016-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/discy/discy-social-questions-and-answers-wordpress-theme-49-missing-authorization 2022-07-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-254-cross-site-scripting 2020-01-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-938-authenticated-subscriber-arbitrary-options-update 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thebi/thebi-105-reflected-cross-site-scripting 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unseen-blog/unseen-blog-100-authenticated-contributor-php-object-injection 2024-09-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bridge/bridge-creative-multipurpose-wordpress-theme-112-cross-site-scripting 2017-08-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/manufactory/manufactory-14-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsmunch/newsmunch-1035-authenticated-contributor-stored-cross-site-scripting 2024-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cortex/cortex-19-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mitech/mitech-234-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/umberto/umberto-128-unauthenticated-php-object-injection 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rozy/rozy-flower-shop-1225-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mella/mella-1229-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/werkstatt/werkstatt-483-unauthenticated-local-file-inclusion 2026-01-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carspot/carspot-dealership-wordpress-classified-theme-217-authenticated-stored-cross-site-scripting 2019-04-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lekker/lekker-18-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-citilights/support-for-citilights-real-estate-wordpress-theme-371-reflected-cross-site-scripting 2026-03-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/depot/depot-116-unauthenticated-local-file-inclusion 2026-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-752-unauthenticated-php-object-injection 2025-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/posterity/posterity-33-cross-site-request-forgery-to-notice-dismissal 2024-07-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fushion-theme/fusion-21-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogmarks/blogmarks-112-unauthenticated-local-file-inclusion 2025-08-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edublink/edublink-207-missing-authorization 2026-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neom-blog/neom-blog-009-reflected-cross-site-scripting 2025-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/everse/multiple-deothemes-themes-various-versions-reflected-cross-site-scripting 2023-07-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/avventure/avventure-1112-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wp-portfolio/wp-portfolio-24-authenticated-contributor-stored-cross-site-scripting 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/book-landing-page/book-landing-page-127-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/allure-real-estate-theme-for-placester/allure-real-estate-theme-for-placester-011-cross-site-scripting 2013-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4220-authenticated-contributor-stored-cross-site-scripting 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spa-and-salon/spa-and-salon-132-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lemmony/lemmony-171-cross-site-request-forgery 2026-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/networker/networker-tech-news-wordpress-theme-with-dark-mode-119-missing-authorization 2024-03-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newscrunch/newscrunch-184-cross-site-request-forgery-to-arbitrary-file-upload 2025-03-03T15:46:15.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-803-unauthenticated-arbitrary-shortcode-execution 2024-12-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bard/bard-2229-missing-authorization 2025-10-31T15:58:23.000Z https://wordsec.net/vulnerabilities/themes/healthfirst/healthfirst-101-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandprix/grandprix-16-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-411-authenticated-subscriber-insecure-direct-object-reference 2025-07-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/moseter/moseter-131-reflected-cross-site-scripting 2025-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/belletrist/belletrist-12-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rainbownews/rainbownews-107-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mounthood/mounthood-ski-and-snowboarding-html-template-132-unauthenticated-php-object-injection 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenmart/greenmart-4211-authenticated-contributor-local-file-inclusion 2025-12-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/simpledark/simpledark-1211-cross-site-scripting 2011-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/freeagent/freeagent-212-unauthenticated-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/getaway/getaway-18-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bloglo/bloglo-113-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woopy/woopy-multipurpose-store-woocommerce-wordpress-shop-theme-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/inhype/inhype-blog-magazine-wordpress-152-unauthenticated-local-file-inclusion 2025-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coinpress/coinpress-1014-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tripgo/tripgo-156-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kidz/kidz-524-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fusion-delisted/fusion-31-arbitrary-file-upload 2015-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-theme-71113-unauthenticated-arbitrary-shortcode-execution 2025-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-wordpress-70-missing-authorization 2025-04-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aora/aora-1315-authenticated-contributor-local-file-inclusion 2025-12-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ingenioso/ingenioso-1140-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medicare/medicare-210-unauthenticated-php-object-injection 2025-05-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/consultor/consultor-a-business-financial-advisor-psd-template-124-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/famita/famita-154-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/minimog/minimogwp-396-unauthenticated-local-file-inclusion 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/topfit/topfit-fitness-and-gym-wordpress-19-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dental/dental-clinic-37-authenticated-subscriber-php-object-injection 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nuss/nuss-133-authenticated-subscriber-php-object-injection 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bello/bello-directory-listing-159-unauthenticated-sql-injection 2021-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sparkling/sparkling-249-missing-authorization-to-unauthenticated-arbitrary-plugin-activationdeactivation 2025-03-04T21:26:16.000Z https://wordsec.net/vulnerabilities/themes/crown-art/crown-art-drawing-and-music-school-wordpress-theme-1211-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-824-reflected-cross-site-scripting 2022-09-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alloggio/alloggio-hotel-booking-wordpress-theme-212-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-job-board-wordpress-theme-390-authenticated-stored-cross-site-scripting 2020-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vithy/vithy-all-versions-arbitrary-file-upload 2014-03-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandportfolio/grand-portfolio-33-cross-site-request-forgery 2026-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/designfolio-plus/designfolio-plus-theme-unkown-versions-arbitrary-file-upload 2015-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tijaji/tijaji-143-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/glamchic/glamchic-1011-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/inspiro/inspiro-212-cross-site-request-forgery-to-arbitrary-plugin-installation 2025-08-20T16:43:50.000Z https://wordsec.net/vulnerabilities/themes/donpeppe/don-peppe-13-missing-authorization 2026-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/freightco/freightco-117-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goldish/goldish-347-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/struktur/struktur-251-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/holmes/holmes-digital-agency-wordpress-theme-17-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reality/reality-estate-multipurpose-wordpress-theme-255-reflected-cross-site-scripting 2020-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newspaper-lite/newspaper-lite-110-reflected-cross-site-scripting 2021-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-411-reflected-cross-site-scripting 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himalayas/himalayas-132-authenticated-administrator-stored-cross-site-scripting 2024-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/qaengine/qaengine-14-privilege-escalation 2015-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/masterstudy/masterstudy-48122-missing-authorization 2025-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adifier/adifier-premium-theme-314-reflected-cross-site-scripting 2023-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-wordpress-70-unauthenticated-php-object-injection-via-path-traversal 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neve-pro-addon/neve-pro-312-authenticated-contributor-stored-cross-site-scripting 2026-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xews-lite/xews-lite-109-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/arya-multipurpose-pro/arya-multipurpose-pro-108-reflected-cross-site-scripting 2023-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2042-authenticated-contributor-stored-cross-site-scripting 2024-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vikinger/vikinger-1932-authenticated-subscriber-arbitrary-file-deletion-via-vikinger_delete_activity_media_ajax-function 2025-07-01T20:29:16.000Z https://wordsec.net/vulnerabilities/themes/auberge/auberge-145-cross-site-scripting 2015-05-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/escortwp/escortwp-362-backdoored-software 2026-06-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/valiance/valiance-12-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-326-unauthenticated-local-file-inclusion 2025-11-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anubis/anubis-125-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/arrival/arrival-145-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aardvark/aardvark-463-reflected-cross-site-scripting 2026-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hotstar/hotstar-multi-purpose-business-theme-14-unauthenticated-php-object-injection 2025-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/exquisite-wp/exquisite-ultimate-newspaper-theme-133-cross-site-scripting 2015-04-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-yogi/yogi-health-beauty-yoga-292-authenticated-subscriber-php-object-injection 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/MDx/mdx-203-authenticated-contributor-stored-cross-site-scripting-via-mdx_list_item-shortcode 2024-08-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-7010-unauthenticated-php-object-injection 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flex-mag/flex-mag-responsive-wordpress-news-theme-352-missing-authorization-to-authenticated-subscriber-arbitrary-option-deletion 2025-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/exhibz/exhibz-309-authenticated-contributor-local-file-inclusion 2025-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/epic-church/epic-church-by-organized-themes-36-arbitrary-file-download 2014-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-12-153-remote-code-execution 2022-10-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hello-agency/hello-agency-105-missing-authorization-to-notice-dismissal 2024-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/infocus/infocus-33-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pressmart/pressmart-modern-elementor-woocommerce-wordpress-theme-1216-unauthenticated-arbitrary-shortcode-execution 2025-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/salient-portfolio/salient-portfolio-182-authenticated-contributor-stored-cross-site-scripting 2025-10-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dailyedition/daily-edition-162-cross-site-scripting 2015-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-1160-reflected-cross-site-scripting 2023-04-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/tagdiv-cloud-library-27-missing-authorization-to-arbitrary-user-metadata-update 2023-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lawyer-landing-page/lawyer-landing-page-127-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nightlife/nightlife-theme-all-known-versions-arbitrary-file-upload 2014-03-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/truemag/truemag-unknown-versions-reflected-cross-site-scripting 2016-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-603-authenticated-contributor-stored-cross-site-scripting-via-wrapper_class-and-class-parameters 2024-08-29T14:54:04.000Z https://wordsec.net/vulnerabilities/themes/celestial-aura/celestial-aura-22-authenticated-subscriber-arbitrary-file-upload 2025-04-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/context-blog/context-blog-125-unauthenticated-private-post-disclosure 2026-02-17T16:33:21.000Z https://wordsec.net/vulnerabilities/themes/dejavu/dejavu-24-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prowess/prowess-181-missing-authorization 2026-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/infocus/infocus-33-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/newspaper-1151-reflected-cross-site-scripting 2022-10-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/corpkit/corpkit-20-authenticated-subscriber-arbitrary-file-upload 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vocal/vocal-112-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hester/hester-1110-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/domnoo/domnoo-149-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/viable-blog/viable-blog-114-cross-site-scripting 2023-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/amwerk/amwerk-120-unauthenticated-php-object-injection 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rezo/multiple-themify-themes-various-versions-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medicenter/medicenter-health-medical-clinic-wordpress-theme-149-reflected-cross-site-scripting 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-245-reflected-cross-site-scripting 2025-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/total/total-2159-missing-authorization-to-authenticated-subscriber-sections-update 2024-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/katelyn/katelyn-1010-unauthenticated-local-file-inclusion 2025-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yozi/yozi-2063-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-mounty/the-mounty-hiking-campground-children-camping-wordpress-theme-11-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/n7-golf-club/n7-golf-club-sports-events-2160-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carspot/carspot-dealership-wordpress-classified-theme-223-stored-cross-site-scripting 2020-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kleo/kleo-550-authenticated-contributor-local-file-inclusion 2025-10-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/simpolio/simpolio-fullscreen-portfolio-blog-html-theme-132-arbitrary-options-update 2015-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/amuli/amuli-230-unauthenticated-local-file-inclusion 2026-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kiddy/kiddy-208-unauthenticated-local-file-inclusion 2026-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/avantage/avantage-249-unauthenticated-php-object-injection 2025-05-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-student-arbitrary-file-upload 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kelly-young/kelly-young-110-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kastell/kastell-20-unauthenticated-local-file-inclusion 2026-06-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sirius/sirius-10-cross-site-scripting 2007-08-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jannah/jannah-760-unauthenticated-local-file-inclusion 2025-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3205-authenticated-contributor-stored-cross-site-scripting 2025-10-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/confidant/confidant-startup-consulting-services-wordpress-theme-14-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tinysalt/tinysalt-3100-unauthenticated-php-object-injection 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ogami/ogami-153-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/classified-pro/classified-pro-1014-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-installation 2025-10-15T17:58:17.000Z https://wordsec.net/vulnerabilities/themes/traveler/travel-booking-wordpress-theme-323-reflected-cross-site-scripting 2025-09-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hello-fse-blog/hello-fse-blog-106-missing-authorization 2025-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/m2-ce/m2-construction-and-tools-store-112-unauthenticated-php-object-injection 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobscout/jobscout-117-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-storefront/vw-storefront-099-missing-authorization-to-authenticated-subscriber-settings-reset 2025-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenthumb/green-thumb-1112-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/backpacktraveler/backpack-traveler-2102-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/echo/echo-1150-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unique/unique-030-authenticated-contributor-stored-cross-site-scripting 2024-04-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-multipurpose-woocommerce-theme-954-authenticated-subscriber-local-file-inclusion 2025-10-14T14:24:23.000Z https://wordsec.net/vulnerabilities/themes/sparkle-fse/sparkle-fse-109-missing-authorization 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ridhi/ridhi-112-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blabber/blabber-170-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gaea/gaea-38-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/GamesTheme/gamestheme-103-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xinterio/xinterio-42-unauthenticated-local-file-inclusion 2025-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/filmax/filmax-1111-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/manual/manual-documentation-knowledge-base-education-wordpress-754-authenticated-contributor-stored-cross-site-scripting 2026-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pagelines/pagelines-theme-146-missing-authorization 2015-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/salient/salient-1740-missing-authorization 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/copypress/copypress-145-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/phlox-pro/phlox-pro-5164-reflected-cross-site-scripting-via-search-parameters 2024-08-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/solar/solar-energy-35-authenticated-subscriber-php-object-injection 2025-05-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/behold/behold-15-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/businext/businext-244-unauthenticated-local-file-inclusion 2025-09-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/craftcoffee/craft-236-reflected-cross-site-scripting 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nexio/nexio-1100-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snsvicky/sns-vicky-37-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-171-reflected-cross-site-scripting 2025-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woohoo/woohoo-newspaper-magazine-theme-253-cross-site-request-forgery-to-settings-update 2023-10-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandnews/grand-news-343-reflected-cross-site-scripting 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alone/alone-charity-multipurpose-non-profit-wordpress-theme-785-missing-authorization-to-unauthenticated-arbitrary-file-deletion 2025-07-14T15:24:20.000Z https://wordsec.net/vulnerabilities/themes/meta-news/meta-news-117-unauthenticated-local-file-inclusion 2024-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sailing/sailing-446-missing-authorization 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goya/goya-1087-unauthenticated-reflected-cross-site-scripting-via-multiple-parameters 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsmatic/newsmatic-131-missing-authorization 2024-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/etude/etude-16-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/donpeppe/don-peppe-pizza-and-fast-food-wordpress-theme-13-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/arcane/arcane-366-missing-authorization 2025-12-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-324-reflected-cross-site-scripting 2024-08-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kipso/kipso-134-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/real-spaces/real-spaces-wordpress-properties-directory-theme-35-authenticated-subscriber-privilege-escalation-to-administrator-via-change_role_member 2025-08-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/laurits/laurits-151-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5105-missing-authorization 2025-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/estate/estate-134-unauthenticated-php-object-injection 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-6011-unauthenticated-local-file-inclusion 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/werkstatt/werkstatt-creative-portfolio-wordpress-theme-472-cross-site-request-forgery 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/evolve/evolve-127-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/caulk/caulk-unknown-versions-full-path-disclosure 2013-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/studiozen/studiozen-16-multiple-vulnerabilities 2013-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/superlist/superlist-directory-wordpress-theme-directory-listings-292-stored-cross-site-scripting 2019-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/academist/academist-13-unauthenticated-local-file-inclusion 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/splendour/splendour-123-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fitflex/fitflex-16-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pressroom/pressroom-news-magazine-wordpress-theme-70-reflected-cross-site-scripting 2025-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alone/alone-783-unauthenticated-remote-code-execution 2025-07-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vegadays/vegadays-vegetarian-food-festival-eco-event-wordpress-theme-120-unauthenticated-local-file-inclusion 2026-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/digital-store/easy-digital-downloads-edd-digital-store-133-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/theagency/theagency-all-versions-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/doccure/doccure-150-authenticated-subscriber-arbitrary-file-upload 2025-09-08T05:35:13.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-411-unauthenticated-local-file-inclusion 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grey-opaque/grey-opaque-201-authenticated-contributor-stored-cross-site-scripting-via-download-button-shortcode 2024-06-21T15:09:23.000Z https://wordsec.net/vulnerabilities/themes/aihub/ai-hub-startup-technology-wordpress-theme-137-unauthenticated-arbitrary-file-upload 2025-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/instantva/instant-va-101-authenticated-subscriber-arbitrary-file-deletion 2026-03-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/restaurt/restaurt-104-authenticated-subscriber-arbitrary-file-upload 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dimension/dimension-unknown-versions-cross-site-request-forgery-to-arbitrary-file-upload 2013-11-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wolmart/wolmart-multi-vendor-marketplace-woocommerce-theme-196-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-845-missing-authorization 2024-04-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rosebud/rosebud-14-authenticated-subscriber-insecure-direct-object-reference 2026-01-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himer/himer-social-questions-and-answers-210-authenticated-subscriber-insecure-direct-object-reference 2024-06-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/context-blog/context-blog-135-unauthenticated-sensitive-information-exposure-via-postid-parameter 2026-07-10T17:12:41.000Z https://wordsec.net/vulnerabilities/themes/learnify/learnify-online-courses-education-wordpress-theme-1150-unauthenticated-local-file-inclusion 2026-04-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/viala/viala-131-reflected-cross-site-scripting 2024-09-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prostore/prostore-113-open-redirect 2014-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/topscorer/topscorer-sports-wordpress-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rareradio/rare-radio-10151-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/askka/askka-10-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shuttle/shuttle-150-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medicenter/medicenter-health-medical-clinic-151-unauthenticated-php-object-injection 2025-07-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/newspaper-922-cross-site-scripting 2019-02-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/maia/maia-1115-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spalab/spalab-beauty-salon-wordpress-67-unauthenticated-stored-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-wound/the-wound-001-unauthenticated-local-file-inclusion 2025-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fooddy/fooddy-1310-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/college/multiple-themes-various-versions-reflected-cross-site-scripting-via-search-field 2023-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flashy/flashy-121-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-482-authenticated-contributor-local-file-inclusion 2025-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mission/mission-122-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bw-zagg/zagg-electronics-accessories-woocommerce-wordpress-theme-141-unauthenticated-local-file-inclusion 2025-06-13T19:48:41.000Z https://wordsec.net/vulnerabilities/themes/wireless-butler/wireless-butler-1011-reflected-cross-site-scripting 2025-04-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/radcliffe-2/radcliffe-2-2017-missing-authorization 2024-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-320-missing-authorization 2025-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/manual/manual-documentation-knowledge-base-education-wordpress-754-missing-authorization 2026-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gaspard/gaspard-13-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lunna/lunna-115-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-diaries/travel-diaries-124-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/giardino/giardino-1110-unauthenticated-local-file-inclusion 2025-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yogi/yogi-293-authenticated-subscriber-php-object-injection 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thinkresponsive/think-responsive-10-arbitrary-file-upload 2013-11-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sweetdate/sweet-date-401-unauthenticated-php-object-injection 2026-02-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-19991-unauthenticated-information-exposure 2025-12-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-825-unauthenticated-post-disclosure 2025-07-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2761-authenticated-contributor-stored-cross-site-scripting-via-custom-js 2025-01-20T21:55:18.000Z https://wordsec.net/vulnerabilities/themes/fabrica/fabrica-181-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/moneyflow/moneyflow-10-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/logtik/logtik-23-reflected-cross-site-scripting 2025-09-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/educenter/educenter-157-missing-authorization-via-activate_plugin 2023-04-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/paramount/paramount-all-versions-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dolcino/dolcino-pastry-and-cake-shop-wordpress-theme-16-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-284-authenticated-contributor-arbitrary-file-deletion-via-mfn-icon-upload 2026-05-04T21:38:53.000Z https://wordsec.net/vulnerabilities/themes/bello/directory-listing-160-reflected-cross-site-scripting 2021-03-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/js-paper/js-paper-257-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-pet-shop/vw-pet-shop-147-missing-authorization 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nirvana/nirvana-163-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bbe/bbe-153-authorization-bypass 2018-05-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-6012-authentication-bypass 2026-02-11T12:46:01.000Z https://wordsec.net/vulnerabilities/themes/resido/resido-real-estate-wordpress-theme-36-missing-authorization-to-unauthenticated-server-side-request-forgery-and-api-key-settings-update 2025-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/meals-wheels/meals-wheels-1112-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brook/brook-agency-business-creative-wordpress-theme-290-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/auto-repair/auto-repair-226-reflected-cross-site-scripting 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thrive-theme/thrive-theme-builder-3242-cross-site-request-forgery 2023-11-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spike/spike-12-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fitline/fitline-16-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/crius/crius-all-known-versions-cross-site-scripting 2013-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unnamed/unnamed-12171-and-unnamed-se-103-cross-site-scripting 2007-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blackfyre/blackfyre-254-cross-site-request-forgery 2026-02-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/redline/redline-166-reflected-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobcareer/jobcareer-73-authenticated-subscriber-arbitrary-file-deletion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reality/reality-estate-multipurpose-wordpress-theme-253-reflected-cross-site-scripting 2020-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/triply/triply-247-authenticated-contributor-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xsmart/xsmart-1294-missing-authorization 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandphotography/grand-photography-578-cross-site-request-forgery 2026-02-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/consultaid/consult-aid-143-unauthenticated-php-object-injection 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/corpkit/corpkit-business-consulting-wordpress-theme-105-authenticated-subscriber-sensitive-information-exopsure 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bw-giftxtore/giftxtore-175-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yvora/yvora-premium-wordpress-theme-portfolio-unspecified-version-arbitrary-file-upload 2012-11-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/revo/revo-4026-unauthenticated-local-file-inclusion 2025-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anthology/anthology-145-arbitrary-file-upload 2013-11-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cakifo/cakifo-10-161-cross-site-scripting 2014-09-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workio/workio-102-reflected-cross-site-scripting 2020-07-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/malmo/malm-22-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kapee/kapee-170-unauthenticated-php-object-injection 2026-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oceanwp/oceanwp-409-authenticated-contributor-stored-cross-site-scripting-via-select-html-tag 2025-06-18T16:22:13.000Z https://wordsec.net/vulnerabilities/themes/artificial-intelligence/artificial-intelligence-124-cross-site-scripting 2015-05-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/imevent/imevent-340-missing-authorization 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dailydeal/dailydeal-by-templatic-3010-cross-site-request-forgery-to-arbitrary-file-upload 2013-10-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tiger/tiger-20-reflected-cross-site-scripting 2025-04-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsexo/newsexo-71-cross-site-request-forgery 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-475-unauthenticated-arbitrary-file-deletion 2024-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vango/vango-133-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/clean-retina/clean-retina-306-unauthenticated-local-file-inclusion 2024-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ashe/ashe-2233-cross-site-request-forgery-to-notice-dismissal 2024-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lovetravel/love-travel-20-37-reflected-cross-site-scripting 2020-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-booking-and-rentals-wordpress-theme-244-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-user-deletion 2025-05-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lovestory/love-story-1312-unauthenticated-php-object-injection 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/togo/togo-104-reflected-cross-site-scripting 2025-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/granola/granola-113-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/valeska/valeska-122-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-837-unauthenticated-arbitrary-shortcode-execution 2026-01-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobify/jobify-job-board-wordpress-theme-427-missing-authorization-to-unauthenticated-server-side-request-forgery-arbitrary-image-upload-and-image-generation 2025-01-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5811-improper-authentication 2023-05-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/esplanade/esplanade-115-cross-site-scripting 2015-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hoteller/hoteller-689-reflected-cross-site-scripting 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xin/xin-1081-unauthenticated-php-object-injection 2024-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/real-estate-directory/real-estate-directory-105-cross-site-request-forgery-via-rdm_activate_plugin 2023-03-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/salient/salient-5553-dom-cross-site-scripting 2015-06-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/monalisa/mona-lisa-212-reflected-cross-site-scripting 2020-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sixtees/sixtees-all-versions-arbitrary-file-upload 2014-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/press-grid/pressgrid-frontend-publish-reaction-multimedia-theme-131-unauthenticated-php-object-injection 2025-06-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sliding-door/sliding-door-36-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/printo/printo-111-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woffice/woffice-5430-reflected-cross-site-scripting 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/findus/findus-directory-listing-wordpress-theme-1115-cross-site-scripting 2020-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/seafood-company/seafood-company-14-unauthenticated-php-object-injection 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sliding-door/multiple-themes-various-versions-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thrive-theme/thrive-theme-builder-3240-privilege-escalation 2023-11-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/noo-jobmonster-484-unauthenticated-sql-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-242-unauthenticated-privilege-escalation-in-homey_save_profile 2025-03-04T21:24:24.000Z https://wordsec.net/vulnerabilities/themes/charity-zone/charity-zone-111-authenticated-subscriber-arbitrary-file-upload 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/truemag/truemag-43142-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsmash/newsmash-1071-authenticated-contributor-stored-cross-site-scripting 2024-12-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elegant-pink/elegant-pink-130-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/preschool-and-kindergarten/preschool-and-kindergarten-125-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/g5plus-april/g5plus-april-68-missing-authorization 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2097-missing-authorization 2025-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/savory/savory-25-unauthenticated-local-file-inclusion 2025-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/puzzles/puzzles-wp-magazine-review-with-store-wordpress-theme-rtl-424-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting 2025-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ashtanga/ashtanga-12-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ghostwriter/ghostwriter-14-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flap/flap-business-wordpress-theme-15-unauthenticated-php-object-injection 2025-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/invetex/invetex-218-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prider/prider-1131-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nyla/nyla-17-unauthenticated-arbitrary-shortcode-execution 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snow-monkey/snow-monkey-2915-unauthenticated-blind-server-side-request-forgery 2025-09-25T17:34:57.000Z https://wordsec.net/vulnerabilities/themes/arya-multipurpose/arya-multipurpose-105-reflected-cross-site-scripting 2023-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cover-wp/cover-wp-165-cross-site-scripting 2011-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zuut/zuut-142-unauthenticated-php-object-injection 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/empowerment/empowerment-102-authenticated-contributor-php-object-injection 2024-09-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/u-design/udesign-responsive-wordpress-theme-4140-reflected-cross-site-scripting 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workscout/workscout-4107-unauthenticated-stored-cross-site-scripting 2026-01-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pinevale/pinevale-1014-unauthenticated-local-file-inclusion 2025-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-359-unauthenticated-sql-injection 2026-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/easybook/cththemes-citybook-233-townhub-105-and-easybook-121-stored-cross-site-scripting 2019-12-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cardealer/cardealer-164-missing-authorization-to-authenticated-subscriber-change-and-delete-js-and-css-files 2025-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/restaurant-and-cafe/restaurant-and-cafe-125-missing-authorization 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photolio/photolio-theme-all-known-versions-cross-site-scripting 2013-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rightway/right-way-40-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-216-authenticated-shop-manager-stored-cross-site-scripting 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/good-homes/good-homes-1313-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/verdure/verdure-organic-tea-shop-wordpress-theme-16-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/make_a_statement/make-a-statement-all-versions-arbitrary-file-upload 2013-11-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-to-theme-settings-update 2022-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eduma/eduma-576-authenticated-contributor-local-file-inclusion 2025-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zox-news/zox-news-3160-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2025-01-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/renewal/renewal-122-unauthenticated-local-file-inclusion 2025-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-monster/travel-monster-112-cross-site-request-forgery-to-notice-dismissal 2024-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flozen-theme/flozen-151-unauthenticated-arbitrary-file-upload 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alone/alone-782-unauthenticated-remote-code-execution 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-chocolate/dt-chocolate-10-open-redirect 2013-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nuss/nuss-133-missing-authorization 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/a-mart/a-mart-102-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dermatology-clinic/dermatology-clinic-143-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tainacan-interface/tainacan-interface-272-reflected-cross-site-scripting 2024-04-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jnews/jnews-wordpress-newspaper-magazine-blog-amp-theme-806-reflected-cross-site-scripting 2021-05-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sober/sober-3512-missing-authorization 2026-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chameleon/chameleon-theme-39-arbitrary-file-uploads 2013-11-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jannah/jannah-544-reflected-cross-site-scripting 2021-06-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kidsplanet/kids-planet-2214-unauthenticated-php-object-injection 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-713-authenticated-contributor-stored-cross-site-scripting 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coachify/coachify-115-missing-authorization 2026-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rightnow/right-now-unknown-versions-arbitrary-file-upload 2013-10-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/news-event/news-event-101-authenticated-subscriber-arbitrary-file-upload 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pearl/pearl-corporate-business-348-unauthenticated-local-file-inclusion 2025-02-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hueman/hueman-3724-cross-site-request-forgery-to-notice-dismissal 2024-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gracey/gracey-14-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/craftis/craftis-handcraft-artisan-elementor-template-kit-128-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/femme/femme-1311-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-825-authenticated-subscriber-cross-site-scripting 2022-10-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/storepress/storepress-1012-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-752-authenticated-subscriber-php-object-injection 2025-05-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shopo/shopo-114-authenticated-contributor-arbitrary-file-upload 2025-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realhomes/rh-real-estate-wordpress-theme-453-authenticated-subscriber-php-object-injection 2026-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wproject/wproject-580-reflected-cross-site-scripting 2025-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/echelon/echelon-24-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zegen/zegen-119-authenticated-subscriber-local-file-inclusion 2025-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homesweet/homesweet-real-estate-wordpress-theme-14-insecure-direct-object-reference 2020-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-yogi/yogi-health-beauty-yoga-292-reflected-cross-site-scripting 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-321-unauthenticated-php-object-injection 2025-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photome/photome-572-unauthenticated-server-side-request-forgery 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/artale/artale-wedding-photography-wordpress-222-unauthenticated-stored-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/north-wp/north-575-unauthenticated-local-file-inclusion 2026-01-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7111-authenticatedcontributor-server-side-request-forgery-via-ajax_import_options 2023-08-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goodenergy/good-energy-177-unauthenticated-php-object-injection 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/newspaper-1033-reflected-cross-site-scripting 2020-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/create/create-291-authenticated-author-stored-cross-site-scripting 2024-09-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/busiprof/busiprof-252-cross-site-request-forgery 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wiguard/wiguard-201-authenticated-subscriber-arbitrary-file-upload 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/buzzclub/buzz-club-night-club-dj-and-music-festival-event-wordpress-theme-204-missing-authorization-to-authenticated-subscriber-limited-arbitrary-option-update 2025-01-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cozystay/cozystay-191-unauthenticated-local-file-inclusion 2026-02-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ippsum/ippsum-120-unauthenticated-php-object-injection 2026-02-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/critique/critique-117-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eunice/eunice-all-versions-reflected-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/minamaze/minamaze-1101-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-199-unauthenticated-arbitrary-file-upload 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/casamia/casamia-property-rental-real-estate-wordpress-theme-112-unauthenticated-local-file-inclusion 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ruza/ruza-107-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/weeklynews/weekly-news-229-cross-site-scripting 2015-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kernel-theme/kernel-premium-wordpress-blog-magazine-theme-news-editorial-all-versions-arbitrary-file-upload 2013-11-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snow-club/snow-club-11-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/motors/motors-car-dealer-rental-listing-wordpress-theme-5665-unauthenticated-arbitrary-shortcode-execution 2025-05-02T14:13:54.000Z https://wordsec.net/vulnerabilities/themes/fascinate/fascinate-115-missing-authorization 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nova-lite/nova-lite-139-reflected-cross-site-scripting 2020-08-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anywhere-elementor-pro/anywhere-elementor-pro-229-missing-authorization 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-1995-authenticated-student-remote-code-execution 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fabric/fabric-150-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-318-reflected-cross-site-scripting 2025-03-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mediumishh/mediumish-1060-reflected-cross-site-scripting 2021-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/roisin/roisin-121-unauthenticated-local-file-inclusion 2026-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stephanie-king/sking-153-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-420-unauthenticated-local-file-inclusion 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/singlemalt/singlemalt-15-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bluestreet/bluestreet-173-cross-site-request-forgery 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tiger/tiger-10121-unauthenticated-privilege-escalation 2025-11-26T16:19:43.000Z https://wordsec.net/vulnerabilities/themes/thefox/thefox-3970-authenticated-contributor-stored-cross-site-scripting 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/arlo/arlo-603-unauthenticated-stored-cross-site-scripting 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/powerlift/powerlift-321-unauthenticated-local-file-inclusion 2026-01-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cartify/cartify-woocommerce-gutenberg-wordpress-13-authenticated-subscriber-arbitrary-post-deletion 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/parallelus-salutation/salutation-responsive-wordpress-theme-3016-authenticated-stored-cross-site-scripting 2017-07-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-conference/the-conference-125-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nrgbusiness/the-business-161-unauthenticated-php-object-injection 2025-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/skillate/skillate-1210-reflected-cross-site-scripting 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/viral-mag/viral-mag-109-missing-authorization-to-arbitrary-plugin-activation 2023-03-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kalium/kalium-325-unauthenticated-arbitrary-code-execution 2025-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eduma/eduma-547-reflected-cross-site-scripting 2024-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/injob/injob-multi-features-for-recruitment-wordpress-theme-340-reflected-cross-site-scripting 2020-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-12811-authenticated-contributor-local-file-inclusion 2025-10-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eject/eject-217-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hybrid/hybrid-010-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/plank/plank-17-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/solace/solace-2116-missing-authorization 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/myour/myour-151-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blossom-shop/blossom-shop-117-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/awake/awake-33-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/maxcoach/maxcoach-325-unauthenticated-local-file-inclusion 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/frame/frame-240-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fruitful/fruitful-382-stored-cross-site-scripting 2020-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/easyeat/easyeat-190-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sonaar/sonaar-4274-reflected-cross-site-scripting 2025-10-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-775-unauthenticated-local-file-inclusion 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listify/listify-325-reflected-cross-site-scripting 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/feedy/feedy-215-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/backpacktraveler/backpack-traveler-2103-authenticated-subscriber-insecure-direct-object-reference 2025-12-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/minimog/minimogwp-396-authenticated-contributor-local-file-inclusion 2025-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zox-news/zox-news-3170-missing-authorization-to-authenticated-subscriber-arbitrary-options-modification 2025-02-10T19:17:49.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-20145-stored-cross-site-scripting 2019-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-326-missing-authorization 2025-11-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jnews/jnews-wordpress-newspaper-magazine-blog-amp-theme-1166-unauthorized-user-registration 2025-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goto/goto-tour-travel-wordpress-theme-20-reflected-cross-site-scripting 2021-02-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rexcoin/rexcoin-126-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hotstar/hotstar-multi-purpose-business-theme-14-missing-authorization 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-823-authenticated-contributor-stored-cross-site-scripting 2025-07-07T17:26:26.000Z https://wordsec.net/vulnerabilities/themes/sonaar/sonaar-4274-authenticated-subscriber-privilege-escalation 2025-10-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/construction-landing-page/themedropbox-themes-various-versions-missing-authorization-to-notice-dismissal 2024-07-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/porto/porto-710-authenticated-contributor-local-file-inclusion-via-post-meta 2024-05-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/charity-is-hope/hope-300-unauthenticated-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-326-reflected-cross-site-scripting 2025-11-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/plumbing-parts/plumbing-16-unauthenticated-php-object-injection 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/translogic/translogic-1211-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jnews/jnews-1165-missing-authorization 2025-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/celeste/celeste-136-unauthenticated-php-object-injection 2026-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-chocolate/chocolate-wp-responsive-photography-theme-all-versions-full-path-disclosure 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woffice/woffice-5414-unauthenticated-privilege-escalation 2024-12-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spa-and-salon/spa-and-salon-127-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-agency/travel-agency-149-cross-site-request-forgery 2024-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/histudy/histudy-online-courses-education-template-310-unauthenticated-sql-injection 2025-10-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kalium/kalium-3183-reflected-cross-site-scripting 2025-01-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/clanora/clanora-131-unauthenticated-arbitrary-file-upload 2025-09-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sofass/sofass-134-unauthenticated-local-file-inclusion 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-832-authenticated-contributor-local-file-inclusion 2025-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/peakshops/peakshops-159-unauthenticated-local-file-inclusion 2026-01-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-430-reflected-cross-site-scripting 2020-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/abelle/abelle-122-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenmart/greenmart-251-reflected-cross-site-scripting 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-480-authenticated-contributor-stored-cross-site-scripting 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zakra/zakra-415-missing-authorization-to-subscriber-demo-import 2025-08-05T13:58:24.000Z https://wordsec.net/vulnerabilities/themes/pelicula-video-production-and-movie-theme/pelicula-110-unauthenticated-php-object-injection 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/seil/seil-171-unauthenticated-php-object-injection 2025-05-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cardealer/cardealer-164-arbitrary-theme-option-update-to-authenticated-subscriber-privilege-escalation 2025-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/agricola/agricola-110-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xts-hitek/hitek-183-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/onepress/onepress-238-authenticated-author-stored-cross-site-scripting 2024-07-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/victo/victo-1416-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-516-privilege-escalation-via-password-resetaccount-takeover 2024-12-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-theme-291-stored-cross-site-scripting 2019-07-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mydecor/mydecor-159-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carspot/carspot-dealership-wordpress-classified-theme-223-insecure-direct-object-reference 2020-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-monday/accesspress-themes-and-plugin-various-versions-authenticated-subscriber-arbitrary-file-upload 2021-10-06T19:17:00.000Z https://wordsec.net/vulnerabilities/themes/jobify/jobify-430-reflected-cross-site-scripting 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-1173-cross-site-request-forgery 2023-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edumall/edumall-447-authenticated-contributor-local-file-inclusion 2025-12-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-1997-unauthenticated-arbitrary-shortcode-execution-via-re_filterpost 2025-09-05T13:04:49.000Z https://wordsec.net/vulnerabilities/themes/hara/hara-1217-unauthenticated-local-file-inclusion 2026-02-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/trendytravel/trendy-travel-67-reflected-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/couponis-demo/couponis-demo-22-unauthenticated-sql-injection 2023-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thrive-theme/thrive-theme-builder-3240-missing-authorization 2023-11-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-qlean/the-qlean-212-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/weedles/weedles-1112-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oceanwp/oceanwp-411-missing-authorization-to-authenticated-subscriber-settings-update 2025-08-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rashy/rashy-113-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tourimo/tourimo-123-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-518-authentication-bypass 2025-01-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pubzinne/pubzinne-1012-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nokri/nokri-job-board-wordpress-theme-163-authenticated-subscriber-privilege-escalation-via-account-takeover 2025-07-11T16:27:22.000Z https://wordsec.net/vulnerabilities/themes/nuts/nuts-110-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/skyward/skyward-110-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/customify-theme/customify-048-missing-authorization 2025-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nestin/nestin-126-unauthenticated-php-object-injection 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-961-authenticated-subscriber-local-file-inclusion 2025-09-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lafka/lafka-multi-store-burger-pizza-food-delivery-woocommerce-theme-457-missing-authorization-to-authenticated-subscriber-demo-import 2025-03-04T21:09:06.000Z https://wordsec.net/vulnerabilities/themes/trendustry/trendustry-114-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Vistered-Little/vistered-little-unspecified-version-cross-site-scripting 2007-06-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/appzend/appzend-126-authenticated-contributor-stored-cross-site-scripting-via-progressbarlayout-parameter 2025-07-28T22:43:42.000Z https://wordsec.net/vulnerabilities/themes/dwt-listing/dwt-directory-listing-wordpress-theme-336-unauthenticated-arbitrary-user-password-reset 2025-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/equestrian-centre/equestrian-centre-15-unauthenticated-php-object-injection 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edge/edge-209-authenticated-contributor-stored-cross-site-scripting-via-author-display-name 2024-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/abundance/abundance-all-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/deepdigital/deepdigital-web-design-agency-wordpress-theme-102-reflected-cross-site-scripting 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/luxury-wine/luxury-wine-1114-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/theaisle/the-aisle-29-missing-authorization 2025-11-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/assembly/assembly-11-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pimp/pimp-creative-multipurpose-17-unauthenticated-php-object-injection 2025-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tobel/tbel-16-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hello-fse/hello-fse-106-missing-authorization 2026-01-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/quirky/quirky-123-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/airtifact/airtifact-1291-authenticated-contributor-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blix/blix-091-and-blix-091-rus-cross-site-scripting 2007-08-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tuaug4/tuaug4-14-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/purity-of-soul/purity-of-soul-19-reflected-cross-site-scripting 2024-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/boot-store/boot-store-164-reflected-cross-site-scripting 2025-04-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/orchid-store/orchid-store-156-missing-authorization-to-authenticated-subscriber-limited-plugin-activation 2024-08-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/travel-booking-wordpress-theme-2784-cross-site-scripting 2019-05-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/slash-wp/slash-wp-all-versions-multiple-vulnerabilities 2013-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/freeio/freeio-1321-authenticated-contributor-local-file-inclusion 2026-02-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/automotive/automotive-car-dealership-business-wordpress-theme-1333-reflected-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/katerio/katerio-magazine-151-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/benevolent/benevolent-134-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thebe/thebe-130-reflected-cross-site-scripting 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wyzi-business-finder/wyzi-social-directory-wordpress-theme-242-reflected-cross-site-scripting 2021-02-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogmine/blogmine-117-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tobel/tbel-modern-furniture-store-wordpress-theme-181-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/seventrees/seventrees-102-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/velvet/velvet-theme-all-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/essence/essence-11-reflected-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unicamp/unicamp-271-authenticated-contributor-local-file-inclusion 2026-02-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/esotera/esotera-1251-authenticated-contributor-stored-cross-site-scripting 2024-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/satoshi/satoshi-20-arbitrary-file-upload 2014-12-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ureach/ureach-133-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smartseo/smart-seo-40-authenticated-subscriber-sql-injection 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/atahualpa/atahualpa-368-cross-site-scripting 2011-10-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cinerama/cinerama-a-wordpress-theme-for-movie-studios-and-filmmakers-24-authenticated-contributor-local-file-inclusion 2025-12-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vernissage/vernissage-129-arbitrary-options-update 2015-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rara-academic/rara-academic-122-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-340-missing-authorization 2025-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hara/hara-1210-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oceanic/oceanic-1053-cross-site-request-forgery 2024-07-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/exertio/exertio-132-unauthenticated-php-object-injection 2025-07-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bellevuex/hotel-bed-and-breakfast-booking-calendar-theme-bellevue-422-missing-authorization 2025-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-294-authenticated-subscriber-local-file-inclusion 2024-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/automotive/automotive-listings-186-unauthenticated-sql-injection 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wealthco/wealthco-218-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fraction-theme/faction-111-arbitrary-options-update 2015-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/legrand/legrand-217-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/winger/winger-1016-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-theme-334-unauthenticated-arbitrary-email-sending 2023-03-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bonbon/bonbon-16-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/veda/veda-42-authenticated-subscriber-php-object-injection 2025-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enzy/enzy-164-reflected-cross-site-scripting 2025-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/churel/churel-108-authenticated-contributor-stored-cross-site-scripting 2025-03-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tuning/tuning-13-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sinatra/sinatra-14-authenticated-contributor-stored-cross-site-scripting 2024-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jack-well/jack-well-1014-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-294-cross-site-request-forgery-to-account-takeover 2024-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yobazar/yobazar-167-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zoner/zoner-real-estate-wordpress-theme-42-cross-site-scripting 2019-09-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nuss/nuss-133-unauthenticated-local-file-inclusion 2025-08-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hostiko/hostiko-hosting-wordpress-whmcs-theme-301-reflected-cross-site-scripting 2025-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elegance/elegance-24-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flashnews/flash-news-all-versions-multiple-vulnerabilities 2013-02-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nsc/nsc-10-prototype-pollution-to-reflected-cross-site-scripting 2023-07-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cerato/cerato-2218-reflected-cross-site-scripting 2025-09-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cream-blog/cream-blog-217-missing-authorization 2026-02-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vandana-lite/vandana-lite-119-cross-site-request-forgery-to-notice-dismissal 2024-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19953-authenticated-subscriber-arbitrary-file-upload 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workreap/workreap-freelance-marketplace-and-directory-wordpress-theme-222-arbitrary-file-upload 2021-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goto/goto-tour-travel-wordpress-theme-21-reflected-cross-site-scripting 2021-05-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kriya/kriya-34-authenticated-subscriber-php-object-injection 2025-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-monday/accesspress-themes-and-plugin-various-versions-cross-site-request-forgery 2022-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-1290-authenticated-contributor-stored-cross-site-scripting 2025-10-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/remons/remons-134-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/emberlyn/emberlyn-131-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smartseo/smart-seo-29-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hoverex/hoverex-cryptocurrency-ico-elementor-template-kit-1510-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blanka-wp/blanka-one-page-wordpress-15-unauthenticated-local-file-inclusion 2025-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/itok/itok-1142-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/civi/civi-job-board-freelance-marketplace-wordpress-theme-214-authentication-bypass-via-password-update 2025-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-builder-1124-unauthenticated-sql-injection-via-p-parameter 2025-07-28T16:22:12.000Z https://wordsec.net/vulnerabilities/themes/gotravel/gotravel-21-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-city-travel-guide-wordpress-theme-175-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elessi-theme/elessi-641-authenticated-subscriber-local-file-inclusion 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/exit-game/exit-game-143-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/weaver-xtreme/weaver-xtreme-theme-507-authenticatedcontributor-stored-cross-site-scripting-via-display-name 2023-04-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-responsive-multipurpose-wordpress-woocommerce-theme-2756-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-08-29T16:16:40.000Z https://wordsec.net/vulnerabilities/themes/allegiant/epsilon-framework-themes-various-versions-function-injection 2020-10-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/energia/energia-112-unauthenticated-arbitrary-file-upload 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/antioch/antioch-13-arbitrary-file-download 2014-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lonie/lonie-121-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/construct/construct-14-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-872-authenticated-contributor-stored-cross-site-scripting 2026-01-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cardealer/car-dealer-automotive-wordpress-theme-119-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/foxiz/foxiz-235-unauthenticated-server-side-request-forgery 2024-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/wp-pro-real-estate-7-354-authenticated-custom-arbitrary-file-upload 2025-03-31T19:22:57.000Z https://wordsec.net/vulnerabilities/themes/themify-ultra/themify-ultra-735-missing-authorization 2023-10-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/selio/selio-real-estate-directory-11-stored-cross-site-scripting 2019-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tripster/tripster-1010-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/travel-booking-wordpress-theme-284-sql-injection 2020-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-1260-authenticated-contributor-stored-cross-site-scripting-via-title-and-data-dt-img-description-attributes 2025-08-09T01:09:26.000Z https://wordsec.net/vulnerabilities/themes/brooklyn/brooklyn-4992-php-object-injection 2024-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/royale-news/royale-news-224-missing-authorization 2026-02-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-responsive-multipurpose-wordpress-woocommerce-theme-2755-authenticated-author-stored-cross-site-scripting-via-svg-file 2024-09-12T17:35:48.000Z https://wordsec.net/vulnerabilities/themes/blossom-spa/blossom-spa-133-sensitive-information-exposure 2024-03-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/justicia/justicia-12-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/construction-landing-page/construction-landing-page-135-cross-site-request-forgery 2024-07-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elementra/elementra-100-elementor-wordpress-theme-109-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/leedo/leedo-300-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rhodos/rhodos-133-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ask-me/ask-me-683-cross-site-request-forgery 2022-08-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pennews/pennews-674-missing-authorization 2025-12-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oceanwp/oceanwp-354-missing-authorization-to-sensitive-information-exposure-via-limited-local-file-inclusion 2024-03-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/playroom/playroom-141-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-71110-cross-site-request-forgery 2024-12-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/masterstudy/masterstudy-48126-authenticated-contributor-local-file-inclusion 2025-10-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-1997-unauthenticated-password-protected-post-disclosure 2025-09-05T13:04:32.000Z https://wordsec.net/vulnerabilities/themes/digi-store/digi-store-114-authenticated-contributor-stored-cross-site-scripting 2025-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/roisin/roisin-flower-shop-and-florist-wordpress-theme-14-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oxpitan/oxpitan-135-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/posterity/posterity-38-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homevillas-real-estate/home-villas-real-estate-wordpress-theme-22-cross-site-scripting 2020-07-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2022-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/caliris-wp/caliris-15-unauthenticated-local-file-inclusion 2025-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/melos/melos-160-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/editorialmag/editorialmag-120-missing-authorization-to-authenticated-plugin-activation 2023-05-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fiorello/fiorello-florist-and-flower-shop-wordpress-theme-10-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lineagency/line-agency-131-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/royal-elementor-kit/royal-elementor-kit-10116-missing-authorization-to-arbitrary-transient-update 2024-02-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/diamond/diamond-248-reflected-cross-site-scripting 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rife-free/rife-free-2419-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zegen/zegen-church-wordpress-theme-119-authenticated-subscriber-arbitrary-file-upload 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/responsive-mobile/responsive-mobile-1151-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/monolit/monolit-206-unauthenticated-stored-cross-site-scripting 2023-02-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nokri/nokri-job-board-wordpress-theme-162-unauthenticated-arbitrary-password-change 2025-02-28T18:07:17.000Z https://wordsec.net/vulnerabilities/themes/rhythmo/rhythmo-134-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anon2x/anon-2210-reflected-cross-site-scripting 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/curly/curly-33-unauthenticated-local-file-inclusion 2026-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/confix/confix-1013-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bulk/bulk-1011-missing-authorization 2025-04-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tinysalt/cozystay-170-and-tinysalt-390-unauthenticated-php-object-injection-in-ajax_handler 2025-03-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reisen/reisen-141-unauthenticated-php-object-injection 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eventpress/eventpress-222-reflected-cross-site-scripting 2026-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smartseo/smart-seo-212-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/noo-jobmonster-485-reflected-cross-site-scripting 2026-07-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/motors/motors-5667-unauthenticated-privilege-escalation-via-password-updateaccount-takeover 2025-05-19T16:51:02.000Z https://wordsec.net/vulnerabilities/themes/gardis/gardis-1213-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-609-missing-authorization-to-sensitive-information-disclosure-in-avia-export-classphp 2025-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingeasy/listingeasy-192-reflected-cross-site-scripting 2025-07-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/glamer/glamer-102-unauthenticated-local-file-inclusion 2025-08-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/molla/molla-ecommerce-html5-template-1519-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/business-roy/business-roy-114-missing-authorization 2026-01-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unlimited/unlimited-145-authenticated-contributor-stored-cross-site-scripting 2025-03-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/theroof/theroof-103-reflected-cross-site-scripting 2023-04-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wanderic/wanderic-1010-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wp-weixin/wp-weixin-1316-authenticated-administrator-stored-cross-site-scripting 2025-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wilmer/wilmr-35-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goza-theme/goza-nonprofit-charity-wordpress-theme-322-missing-authorization-to-unauthenticated-arbitrary-file-upload-via-plugin-installation 2025-09-08T19:58:15.000Z https://wordsec.net/vulnerabilities/themes/horizon/horizon-11-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/corbesier/corbesier-1150-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-870-authenticated-contributor-local-file-inclusion 2025-10-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alloggio/alloggio-hotel-booking-18-unauthenticated-local-file-inclusion 2025-03-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingo/listingo-325-unauthenticated-arbitrary-file-upload 2022-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wproject/wproject-580-authenticated-subscriber-privilege-escalation 2025-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kathmag/multiple-sparklewpthemes-themes-various-versions-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2711-missing-authorization-via-_tool_history_delete 2023-08-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cardealer/cardealer-164-cross-site-request-forgery-to-user-update-via-update_user_profile 2025-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soleng/soleng-105-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ailab/ai-lab-542-unauthenticated-php-object-injection 2026-04-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/miraculous/miraculous-multi-vendor-online-music-store-elementor-wordpress-theme-212-missing-authorization 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kossy/kossy-minimalist-ecommerce-wordpress-theme-145-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-contributor-arbitrary-directory-deletion 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/towny/towny-116-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blockbooster/blockbooster-1010-missing-authorization 2024-08-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/techlink/techlink-13-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sirat/sirat-151-missing-authorization 2025-04-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-city-travel-guide-wordpress-theme-170-unauthenticated-privilege-escalation 2026-03-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hydro/hydro-28-reflected-cross-site-scripting 2025-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/teardrop/teardrop-fullscreen-photography-theme-portfolio-185-arbitrary-options-update 2015-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-400-cross-site-scripting 2020-07-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/genemy/genemy-166-authenticated-subscriber-server-side-request-forgery 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-282-unauthenticated-sql-injection 2023-04-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/myriad/myriad-20-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/letruffe/le-truffe-117-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tiger/tiger-10121-authenticated-subscriber-privilege-escalation 2025-11-26T16:19:02.000Z https://wordsec.net/vulnerabilities/themes/ozisti/ozisti-1110-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ithemes-mobile/ithemes-mobile-128-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cstardesign/cstar-design-wordpress-theme-49-sql-injection 2012-11-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mckinney-politics/mckinneys-politics-128-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/putter/putter-117-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/codiqa/codiqa-128-unauthenticated-php-object-injection 2025-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alukas/alukas-300-unauthenticated-php-object-injection 2026-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-341-missing-authorization 2025-01-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/farmagrico/farm-agrico-1311-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Divi/divi-4251-authenticated-contributor-stored-cross-site-scripting 2024-06-17T19:31:11.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-travel-booking-wordpress-theme-284-cross-site-scripting 2020-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lms/lms-92-unauthenticated-sql-injection 2025-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/myriad/myriad-20-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/integro/integro-180-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tydskrif/tydskrif-113-reflected-cross-site-scripting 2024-12-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mbstore/mbstore-digital-woocommerce-wordpress-theme-23-unauthenticated-local-file-inclusion 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/melania/melania-250-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coachify/coachify-115-cross-site-request-forgery 2026-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bookyourtravel/book-your-travel-81817-authenticated-subscriber-privilege-escalation 2024-07-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/constructo/constructo-439-cross-site-request-forgery 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/puzzles/puzzles-426-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/porto/porto-762-reflected-cross-site-scripting 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nictitate/nictitate-114-cross-site-request-forgery 2024-03-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/racquet/racquet-1120-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/impacto-patronus/impacto-patronus-123-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/besa/besa-2315-unauthenticated-local-file-inclusion 2026-02-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fruitful/fruitful-381-reflected-cross-site-scripting 2020-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/top-dog/top-dog-105-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/molla/molla-ecommerce-html5-template-1516-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prestige/prestige-141-reflected-cross-site-scripting 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/infinite/infinite-112-authenticated-contributor-stored-cross-site-scripting-via-project_url-parameter 2024-06-27T18:55:19.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-514-stored-cross-site-scripting 2017-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/consulting/consulting-150-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cozystay/cozystay-170-missing-authorization-to-arbitrary-action-execution-in-ajax_handler 2025-03-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/deliciosa/deliciosa-1100-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zenlite/zenlite-43-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-938-unauthenticated-sql-injection 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/streamvid/streamvid-686-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-622-authenticated-contributor-cross-site-scripting 2020-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dotlife/dotlife-495-reflected-cross-site-scripting 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brandy/brand-116-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rockstar-theme/various-orange-themes-various-unspecified-versions-cross-site-request-forgery-to-arbitrary-file-upload 2013-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mosaic/mosaic-171-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-06-21T15:08:54.000Z https://wordsec.net/vulnerabilities/themes/elegant-pink/elegant-pink-133-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yacht-rental/yacht-rental-26-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eunoia/eunoia-all-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/givingpress-lite/givingpress-lite-186-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spark-multipurpose/spark-multipurpose-107-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/RedSteel/redsteel-all-versions-file-disclosure 2015-01-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/justitia/justitia-110-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/electroserv/electroserv-electrical-repair-service-wordpress-theme-132-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/app-landing-page/app-landing-page-122-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oshin/oshine-727-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dailyedition/daily-edition-162-sql-injection 2015-03-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-wemusic/wemusic-191-reflected-cross-site-scripting 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coalition/coalition-all-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobroller/jobroller-174-reflected-cross-site-scripting 2013-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shaha/shaha-islamic-centre-mosque-theme-rtl-112-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/business-one-page/business-one-page-132-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nifty/nifty-141-unauthenticated-php-object-injection 2026-06-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/foodbook/foodbook-476-unauthenticated-sensitive-information-exposure 2025-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/business-pro/business-pro-1104-reflected-cross-site-scripting 2023-08-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anona/anona-80-unauthenticated-arbitrary-file-download 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neuronet/neuronet-1140-unauthenticated-local-file-inclusion 2025-10-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ask-me/ask-me-687-cross-site-request-forgery 2022-10-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3168-reflected-cross-site-scripting-in-ux-builder 2023-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kerge/kerge-413-unauthenticated-server-side-request-forgery 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/couponxxl/couponxxl-300-unauthenticated-php-object-injection 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/couponxxl/couponxxl-450-cross-site-request-forgery 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noisa/noisa-260-authenticated-subscriber-php-object-injection 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/patricia-blog/patricia-blog-12-cross-site-request-forgery 2024-07-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/basil/basil-204-authenticated-contributor-stored-cross-site-scripting 2024-06-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/besa/besa-238-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/corsa/corsa-theme-15-authenticated-arbitrary-file-upload 2023-01-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/especio/especio-food-blog-elementor-pro-template-kit-10-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3205-reflected-cross-site-scripting 2026-07-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/genesis/open-source-genesis-framework-360-authenticated-contributor-stored-cross-site-scripting-via-multiple-shortcodes 2025-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/news-magazine-x/news-magazine-x-1237-unauthenticated-local-file-inclusion 2025-07-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogistic/blogistic-105-authenticated-subscriber-arbitrary-file-upload 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woffice/woffice-5421-authentication-bypass-via-registration-role 2025-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/konzept/konzept-unknown-version-cross-site-scripting 2012-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spexo/spexo-2011-missing-authorization-to-authenticated-subscriber-limited-plugin-activation 2026-06-26T17:49:02.000Z https://wordsec.net/vulnerabilities/themes/edmin/themify-edmin-200-authenticated-contributor-php-object-injection 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tacticool/tacticool-1013-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-learning-management-system-for-wordpress-wordpress-lms-1841-privilege-escalation 2015-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/highlight/highlight-1029-cross-site-request-forgery-to-notice-dismissal 2024-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-183-reflected-cross-site-scripting 2020-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/genemy/genemy-creative-minimal-landing-page-builder-for-digital-startup-design-studio-agency-in-marketing-166-missing-authorization 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/NativeChurch/nativechurch-161-arbitrary-file-download 2015-07-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-841-unauthenticated-php-object-injection 2023-12-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wolmart/wolmart-multi-vendor-marketplace-woocommerce-theme-1811-unauthenticated-arbitrary-shortcode-execution-in-wolmart_loadmore 2025-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2813-authenticated-contributor-stored-cross-site-scripting 2025-08-05T15:36:42.000Z https://wordsec.net/vulnerabilities/themes/u-design/udesign-theme-230-279-unauthenticated-dom-cross-site-scripting 2015-10-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-199-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/newspaper-1265-authenticated-author-stored-cross-site-scripting-via-attachment-meta 2024-04-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/guff/guff-101-missing-authorization 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/restaurant-and-cafe/restaurant-and-cafe-121-cross-site-request-forgery-to-notice-dismissal 2024-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/educenter/educenter-162-authenticated-contributor-stored-cross-site-scripting 2025-07-25T19:14:01.000Z https://wordsec.net/vulnerabilities/themes/fastx/fastx-102-missing-authorization-to-authenticated-subscriber-limited-plugin-installation-and-activation 2026-05-21T15:59:58.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/newspaper-news-woocommerce-wordpress-theme-672-cross-site-scripting 2016-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/winters/winters-143-prototype-pollution-to-reflected-cross-site-scripting 2023-07-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-job-board-wordpress-theme-481-authentication-bypass 2025-10-30T18:40:35.000Z https://wordsec.net/vulnerabilities/themes/kuteshop/kuteshop-429-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eldon/eldon-10-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/open-shop/open-shop-171-missing-authorization 2026-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-724-reflected-cross-site-scripting 2023-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soho-hotel/soho-hotel-425-reflected-cross-site-scripting 2025-06-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zbench/zbench-142-authenticated-contributor-stored-cross-site-scripting 2024-07-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/air-supply/airsupply-200-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-322-unauthenticated-sql-injection 2025-07-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/makeaholic/makeaholic-184-unauthenticated-local-file-inclusion 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobify/jobify-job-board-wordpress-theme-430-authenticated-contributor-stored-cross-site-scripting 2024-11-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listivo/listivo-classified-ads-wordpress-theme-2367-reflected-cross-site-scripting 2025-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/organicfood/organicfood-364-authenticated-contributor-local-file-inclusion 2026-02-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/finance/finance-consultant-28-authenticated-subscriber-php-object-injection 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/simplebalance/simple-balance-22-cross-site-scripting 2011-10-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/music/music-15-multiple-vulnerabilities 2013-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/modernize/modernize-340-authenticated-contributor-stored-cross-site-scripting 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/promo/promo-130-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bugspatrol/bugspatrol-150-unauthenticated-php-object-injection 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wilmer/wilmr-342-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lovedate/lovedate-386-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/electron/electron-182-missing-authorization 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neoocular/neo-ocular-12-unauthenticated-local-file-inclusion 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wineshop/wineshop-food-wine-store-wordpress-theme-317-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4240-authenticated-contributor-remote-code-execution 2025-10-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-284-authenticated-author-arbitrary-file-upload-to-remote-code-execution-via-icon-pack-upload 2026-05-04T22:35:37.000Z https://wordsec.net/vulnerabilities/themes/citybook/citybook-243-reflected-cross-site-scripting 2020-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brooklyn/brooklyn-4992-reflected-cross-site-scripting 2024-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/finag/finag-150-unauthenticated-php-object-injection 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gauge/gauge-6564-missing-authorization 2026-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eximious-magazine/magazine-122-unauthenticated-local-file-inclusion 2025-08-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobify/jobify-job-board-wordpress-theme-430-missing-authorization 2024-11-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2711-missing-authorization 2023-11-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/visual-composer-starter/visual-composer-starter-33-authenticated-contributor-stored-cross-site-scripting 2024-08-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sahifa/sahifa-586-authenticated-contributor-stored-cross-site-scripting 2025-10-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-711-missing-authorization-to-shortcode-injection 2023-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplocalplaces/wplocalplaces-unknown-versions-arbitrary-file-upload 2013-10-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pixiv-custom/pixiv-custom-216-cross-site-scripting 2011-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chateau/chteau-121-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-96-unauthenticated-arbitrary-shortcode-execution 2025-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zorka/zorka-wonderful-fashion-woocommerce-theme-157-reflected-cross-site-scripting 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/maxcube/maxcube-131-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medcity/medcity-119-unauthenticated-arbitrary-file-upload 2025-09-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goza-theme/goza-nonprofit-charity-wordpress-theme-322-missing-authorization-to-unauthenticated-arbitrary-file-deletion 2025-07-14T15:24:20.000Z https://wordsec.net/vulnerabilities/themes/aora/aora-home-lifestyle-elementor-woocommerce-theme-1315-unauthenticated-local-file-inclusion 2026-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mTheme-Unus/mtheme-unus-all-versions-local-file-inclusion 2015-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/responsive/responsive-503-authenticated-contributor-stored-cross-site-scripting 2024-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/keenarch/keenarch-201-authenticated-subscriber-arbitrary-file-upload 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lattice/lattice-115-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neobeat/neobeat-music-wordpress-theme-17-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-photography/vw-photography-138-missing-authorization 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/upstore/upstore-170-reflected-cross-site-scripting 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/starto/starto-225-reflected-cross-site-scripting 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/appointment/appointment-373-cross-site-request-forgery 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ghost/ghost-all-versions-arbitrary-file-upload 2013-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-2911-authenticated-subscriber-stored-cross-site-scripting 2026-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yottis/yottis-1010-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/glb/glb-122-missing-authorization 2026-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sober/sober-3511-unauthenticated-information-exposure 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thefox/thefox-3976-reflected-cross-site-scripting 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandtour/grand-tour-travel-agency-wordpress-551-unauthenticated-php-object-injection 2025-05-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hendon/hendon-17-unauthenticated-local-file-inclusion 2026-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/playa/playa-beach-pool-club-wordpress-theme-139-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-359-cross-site-request-forgery 2026-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/expose/expose-all-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smartstart/smart-start-108-cross-site-scripting 2013-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smartit/smartit-premium-responsive-unspecified-version-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/berger/berger-111-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-294-unauthenticated-sql-injection 2024-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-241-authenticated-subscriber-privilege-escalation 2025-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-96-missing-authorization 2025-09-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jardi/jardi-winery-vineyard-wine-shop-wordpress-theme-172-unauthenticated-php-object-injection 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snsanton/sns-anton-41-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tastydaily/tasty-daily-127-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reebox/reebox-148-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rozario/rozario-14-missing-authorization 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/plain-post/plain-post-103-authenticated-subscriber-stored-cross-site-scripting 2024-12-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-420-reflected-cross-site-scripting 2020-07-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vidmov/vidmov-238-authenticated-subscriber-path-traversal 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zioalberto/zio-alberto-122-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/method/method-21-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/headway/headway-389-cross-site-scripting 2006-10-13T20:01:00.000Z https://wordsec.net/vulnerabilities/themes/marcell/marcell-1214-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/micdrop/micdrop-131-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/refraction/refraction-13-multiple-vulnerabilities 2014-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobify/jobify-job-board-wordpress-theme-430-unauthenticated-arbitrary-file-read 2024-11-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/explicit/explicit-all-versions-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/schema-lite/schema-lite-122-cross-site-request-forgery 2024-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flashy/flashy-13-cross-site-scripting 2015-03-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/konsept/konsept-19-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/uncode/uncode-2916-unauthenticated-arbitrary-file-read-in-uncode_admin_get_oembed 2025-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/choices/choices-all-versions-reflected-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anima/anima-141-authenticated-contributor-stored-cross-site-scripting 2024-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7132-missing-authorization 2025-10-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2803-authenticated-contributor-stored-cross-site-scripting 2025-04-15T19:05:04.000Z https://wordsec.net/vulnerabilities/themes/smart-mag/smartmag-1030-authenticated-contributor-local-file-inclusion 2025-11-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/heart/heart-18-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/consultstreet/consultstreet-300-missing-authorization 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/felici/felici-all-versions-arbitrary-file-upload 2014-03-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edumall/edumall-424-unauthenticated-local-file-inclusion 2025-04-25T19:47:44.000Z https://wordsec.net/vulnerabilities/themes/blogvy/blogvy-107-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerup/careerup-231-reflected-cross-site-scripting 2020-07-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/good-mood/good-mood-116-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/amoli/amoli-10-unauthenticated-local-file-inclusion 2026-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-841-authenticated-contributor-sql-injection 2023-12-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/verse/verse-170-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bardwp/bard-16-cross-site-request-forgery 2025-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gameplan/gameplan-event-and-gym-fitness-wordpress-theme-164-reflected-cross-site-scripting 2017-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nokri/nokri-164-cross-site-request-forgery 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/borgholm-marketing-agency-theme/borgholm-16-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/classipress/classipress-314-stored-cross-site-scripting 2011-10-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hygia/hygia-116-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grip/multiple-themes-authenticated-subscriber-arbitrary-plugin-activation-and-deactivation 2024-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kalon/kalon-129-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsblogger/newsblogger-0254-cross-site-request-forgery-to-arbitrary-plugin-installation 2025-04-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/CherryFramework/cherry-framework-314-unauthenticated-backup-download 2026-06-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/typify/typify-302-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/attorney/attorney-3-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2022-12-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sante/sant-151-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wd/wd-10-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/course-builder/course-builder-online-course-wordpress-theme-366-unauthenticated-php-object-injection 2025-05-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xcare/xcare-65-unauthenticated-local-file-inclusion 2025-10-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eleganzo/eleganzo-12-authenticated-subscriber-arbitrary-directory-deletion 2026-04-14T11:01:50.000Z https://wordsec.net/vulnerabilities/themes/greenmart/greenmart-423-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dash/dash-13-unauthenticated-php-object-injection 2025-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/overworld/overworld-13-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/networker/networker-120-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/calliope/calliope-1033-cross-site-request-forgery 2024-03-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bw-zenny/zenny-175-unauthenticated-local-file-inclusion 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/trendy-news/trendy-news-1015-cross-site-request-forgery 2024-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rentic/rentic-11-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kiamo/kiamo-responsive-business-service-wordpress-theme-136-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shieldgroup/shieldgroup-213-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kingcabs/kingcabs-119-authenticated-contributor-stored-cross-site-scripting-via-progressbarlayout-parameter 2025-12-12T15:30:56.000Z https://wordsec.net/vulnerabilities/themes/rara-business/rara-business-125-cross-site-request-forgery-to-notice-dismissal 2024-07-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Grimag/grimag-110-open-redirection 2014-06-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rf/rf-15-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flow/flow-18-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/consulting/consulting-675-authenticated-contributor-local-file-inclusion 2025-10-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/law-office/law-office-330-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/regina-lite/regina-lite-207-reflected-cross-site-scripting 2023-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/preservation/preservation-110-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-867-authenticated-contributor-local-file-inclusion-via-header_layout 2025-08-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4220-missing-authorization 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/overton/overton-creative-wordpress-theme-for-agencies-and-freelancers-13-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-authenticated-subscriber-stored-cross-site-scripting 2022-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/onepress/onepress-236-cross-site-request-forgery-via-save_settings 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fidalgo/fidalgo-122-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/simplish/simplish-264-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/globallogistics/global-logistics-320-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medicalequipment/medical-equipment-ecommerce-wordpress-theme-109-missing-authorization 2025-12-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zenon-lite/zenon-lite-19-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-07-17T14:01:41.000Z https://wordsec.net/vulnerabilities/themes/pubnews/pubnews-107-authenticated-subscriber-arbitrary-plugin-installation 2024-12-05T16:47:54.000Z https://wordsec.net/vulnerabilities/themes/financio/financio-113-cross-site-request-forgery-to-notice-dismissal 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/diza/diza-1315-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fana/fana-1135-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/uncode/uncode-2916-authenticated-subscriber-stored-cross-site-scripting-via-mle-description 2025-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tornados/tornados-21-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magazine-elite/magazine-elite-124-unauthenticated-local-file-inclusion 2025-08-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fioxen/multiple-themes-by-gavias-various-versions-reflected-cross-site-scripting 2025-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eduma/eduma-576-authenticated-contributor-stored-cross-site-scripting 2025-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-411-missing-authorization 2025-08-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/foton/foton-252-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oceanwp/oceanwp-341-authenticated-subscriber-local-file-inclusion 2023-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-192-reflected-cross-site-scripting 2026-04-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/martfury/martfury-woocommerce-marketplace-wordpress-328-missing-authorization 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/welldone/welldone-sports-store-wordpress-theme-24-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wanderland/wanderland-15-missing-authorization 2026-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/preschool-and-kindergarten/preschool-and-kindergarten-121-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thecs/thecs-147-reflected-cross-site-scripting 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/detailx/detailx-1100-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fashion2/fashion-530-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/top-store/top-store-154-authenticated-subscriber-arbitrary-plugin-installationactivation 2024-11-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/diza/diza-138-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5111-authenticated-contributor-stored-cross-site-scripting 2026-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-ultralight/ultralight-12-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fana/fana-1128-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/choreo/choreo-16-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/monki/monki-205-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/switchblade/switchblade-powerful-wordpress-theme-132-arbitrary-file-upload 2013-11-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nika/nika-1214-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pennews/pennews-673-unauthenticated-local-file-inclusion 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/design-comuni-wordpress-theme/design-comuni-italia-111-unauthenticated-stored-cross-site-scripting 2025-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himer/himer-social-questions-and-answers-212-cross-site-request-forgery-to-arbitrary-user-invites 2024-07-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-website-and-ecommerce-builder-for-wordpress-210-reflected-cross-site-scripting 2015-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pantry/pantry-14-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enzio/enzio-responsive-business-wordpress-theme-126-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mandala/mandala-28-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogger-buzz/blogger-buzz-124-missing-authorization-via-activate_plugin 2023-04-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/luxmed/luxmed-medicine-healthcare-doctor-wordpress-122-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/boot-store/boot-store-164-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-07-01T13:24:26.000Z https://wordsec.net/vulnerabilities/themes/my-white/my-white-208-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newses/newses-20077-missing-authorization 2026-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goto/goto-tour-travel-wordpress-theme-21-sql-injection 2021-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mildhill/mildhill-15-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-569-reflected-cross-site-scripting 2024-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/paragon/paragon-11-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3196-missing-authorization 2024-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/travel-booking-wordpress-theme-323-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2025-09-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/streamit/streamit-401-authenticated-subscriber-arbitrary-file-upload 2025-04-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gostore/gostore-164-reflected-cross-site-scripting 2025-10-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/upfrontwp/upfrontwp-10-authenticated-subscriber-stored-cross-site-scripting 2023-01-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/darcie/darcie-115-reflected-cross-site-scripting-via-js-split 2023-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lagom/lagom-20-unauthenticated-php-object-injection 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flashmart/flashmart-2015-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/moneytheme/moneytheme-all-versions-cross-site-scripting 2013-10-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/biolife/biolife-323-missing-authorization 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/studiozen/studiozen-theme-all-versions-cross-site-scripting 2013-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colornews/colornews-126-authenticated-contributor-stored-cross-site-scripting 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jannah/jannah-751-unauthenticated-local-file-inclusion 2025-08-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/morning-coffee/morning-coffee-36-cross-site-scripting 2011-10-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/miion/miion-127-authenticated-subscriber-arbitrary-file-upload 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/malmonation/malmonation-all-versions-sql-injection 2012-11-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kids-world/kids-heaven-32-authenticated-subscriber-php-object-injection 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smart-mag/smartmag-1031-authenticated-contributor-stored-cross-site-scripting 2025-10-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/malgre/malgr-103-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsblogger/newsblogger-0251-authenticated-subscriber-arbitrary-file-upload 2025-04-30T15:00:22.000Z https://wordsec.net/vulnerabilities/themes/apollo/apollo-night-club-dj-event-wordpress-131-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/black-letterhead/black-letterhead-15-cross-site-scripting 2011-09-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anona/anona-80-unauthenticated-arbitrary-file-deletion 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/multifox/multifox-137-authenticated-contributor-stored-cross-site-scripting 2025-01-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cobble/cobble-17-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/quasar/quasar-wordpress-theme-with-animation-builder-192-authorization-bypass 2015-02-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kings-queens/kings-queens-1116-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alone/alone-charity-multipurpose-non-profit-wordpress-theme-783-missing-authorization-to-unauthenticated-arbitrary-file-upload-via-plugin-installation 2025-07-14T15:24:17.000Z https://wordsec.net/vulnerabilities/themes/jetapo-with-woocommerce/jetapo-jobboard-wordpress-theme-and-jetapo-jobboard-wordpress-theme-with-woocommerce-11-cross-site-scripting 2020-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/work-travel-company/work-travel-company-12-unauthenticated-php-object-injection 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pranayama-yoga/pranayama-yoga-122-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shopire/shopire-1057-missing-authorization-to-authenticated-subscriber-limited-plugin-install 2026-02-18T15:29:13.000Z https://wordsec.net/vulnerabilities/themes/ithemes2/ithemes2-143-arbitrary-file-upload 2013-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gymbase_classes/gymbase-theme-classes-14-authenticated-contributor-sql-injection 2025-07-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7116-authenticated-contributor-server-side-request-forgery-via-form_to_url_action 2024-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/allure-real-estate-theme-for-real-estate/allure-real-estate-theme-011-reflected-cross-site-scripting 2013-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spare/spare-17-unauthenticated-php-object-injection 2025-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carzone/carzone-a-complete-car-dealer-html-wire-frame-37-unauthenticated-arbitrary-file-deletion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reality/reality-230-stored-cross-site-scripting 2019-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woostify/woostify-250-authenticated-contributor-stored-cross-site-scripting-via-lityjs-library-via-data-lity-attribute-in-custom-html-block 2026-04-27T18:15:01.000Z https://wordsec.net/vulnerabilities/themes/chronicle/chronicle-10-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/city-store/city-store-145-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/laboom/la-boom-27-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/waveride/waveride-14-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/powerlift/powerlift-321-missing-authorization 2025-11-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colibri-wp/colibriwp-theme-framework-various-versions-missing-authorization 2024-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/harper/harper-113-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-838-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himer/himer-210-cross-site-request-forgery-to-group-leave 2024-06-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/salutation-wp/salutation-3016-authenticated-stored-cross-site-scripting 2017-07-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lightspeed/lightspeed-112-arbitrary-file-upload 2013-01-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stal/stl-17-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tennis-sportclub/tennis-sportclub-tennis-sports-events-wordpress-theme-123-unauthenticated-php-object-injection 2026-02-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4230-authenticated-contributor-stored-cross-site-scripting 2025-10-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gucherry-blog/gucherry-blog-118-reflected-cross-site-scripting 2024-04-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/u-design/udesign-473-reflected-cross-site-scripting 2024-04-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-478-reflected-cross-site-scripting 2025-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cena/cena-store-21126-unauthenticated-local-file-inclusion 2025-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-10-153-missing-authorization-to-arbitrary-content-creationmodification 2022-10-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/influencer/influencer-117-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/piqes/piqes-1011-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/akal/akal-multipurpose-wordpress-theme-all-versions-reflected-cross-site-scripting 2016-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travelicious/travelicious-167-unauthenticated-php-object-injection 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listeo/listeo-directory-listings-with-booking-wordpress-theme-1611-insecure-direct-object-reference 2021-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/honor/honor-shooting-club-weapon-and-gun-store-theme-23-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ironfit/ironfit-15-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cozystay/cozystay-171-unauthenticated-php-object-injection 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anih/anih-creative-agency-wordpress-theme-2024-authenticated-administrator-stored-cross-site-scripting 2024-11-08T14:11:08.000Z https://wordsec.net/vulnerabilities/themes/boldman/boldman-77-authenticated-contributor-local-file-inclusion 2026-02-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/metro/metro-213-unauthenticated-local-file-inclusion 2026-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/window-ac-services/ac-services-hvac-air-conditioning-heating-company-wordpress-125-unauthenticated-local-file-inclusion 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatnews/flatnews-58-reflected-cross-site-scripting 2025-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dessau/dessau-19-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/book-landing-page/book-landing-page-123-cross-site-request-forgery-to-notice-dismissal 2024-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dronex/dronex-1112-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-booking/travel-booking-225-authenticated-subscriber-arbitrary-file-upload 2026-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cocco/cocco-151-authenticated-subscriber-authenticated-insecure-direct-object-reference 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fortius/fortius-230-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/legacy/legacy-19-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-869-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2025-10-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oxygen/oxygen-608-unauthenticated-server-side-request-forgery-via-route_path 2026-03-27T14:05:45.000Z https://wordsec.net/vulnerabilities/themes/mesmerize/mesmerize-1689-materialis-10172-authenticated-arbitrary-options-update 2019-12-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/echelon/echelon-all-versions-arbitrary-file-upload 2014-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kentha/kentha-472-reflected-cross-site-scripting 2026-03-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rockon/rockon-dj-33-reflected-cross-site-scripting 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5105-authenticated-subscriber-stored-cross-site-scripting 2025-09-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himalayas/himalayas-130-authenticated-contributor-stored-cross-site-scripting 2024-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/autoparts/autoparts-158-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/laurent/laurent-31-authenticated-contributor-local-file-inclusion 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7116-unauthenticated-sensitive-information-exposure-via-form-uploads-directory-listing 2024-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kalium/kalium-3183-missing-authorization 2025-08-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sweetdate/sweet-date-373-unauthenticated-privilege-escalation 2024-12-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/beautique/beautique-15-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zermatt/zermatt-161-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/toolbox/toolbox-14-sql-injection 2012-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kute-boutique/boutique-246-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aidreform/themes-from-chimpstudio-and-pixfill-various-versions-unauthenticated-arbitrary-file-upload 2022-12-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adifier-system/adifier-system-314-unauthenticated-sql-injection 2023-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carzone/car-zone-37-authenticated-subscriber-php-object-injection 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/digiqole/digiqole-227-authenticated-contributor-local-file-inclusion 2025-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/modernize/modernize-340-missing-authorization 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/exzo/exzo-124-missing-authorization 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/peakshops/peakshops-159-authenticated-contributor-php-object-injection 2026-01-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/manual/manual-documentation-knowledge-base-education-wordpress-754-unauthenticated-stored-cross-site-scripting 2026-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vilva/vilva-122-cross-site-request-forgery-to-notice-dismissal 2024-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/findall/findall-business-directory-wordpress-theme-14-unauthenticated-local-file-inclusion 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-479-authentication-bypass 2025-08-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/news/news-01-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fingo/findgo-1355-cross-site-request-forgery 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/numinous/numinous-130-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/doccure/doccure-150-unauthenticated-arbitrary-user-password-change 2025-09-08T05:36:20.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-to-post-title-change 2022-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/simplecharm/simplecharm-143-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anarkali/anarkali-109-unauthenticated-local-file-inclusion 2026-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/t1/t1-theme-190-open-redirect 2023-07-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/halstein/halstein-18-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-4900-cross-site-request-forgery 2023-07-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/discy/discy-51-cross-site-request-forgery-to-settings-update 2022-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-6011-missing-authorization 2025-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hostiko/hostiko-9436-unauthenticated-stored-cross-site-scripting 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/royal-elementor-kit/royal-elementor-kit-10116-cross-site-request-forgery-to-notice-dismissal 2024-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dagda/dagda-theme-50-arbitrary-file-upload 2012-11-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carzine/carzine-146-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/web-minimalist-200901/web-minimalist-200901-11-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shiftup/shiftup-13-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/panda/panda-121-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kitring/kitring-28-unauthenticated-local-file-inclusion 2025-08-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snsavaz/avaz-28-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eximius/eximius-22-authenticated-subscriber-arbitrary-file-upload 2025-04-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pawfriends/pawfriends-pet-shop-and-veterinary-wordpress-13-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ipharm/ipharm-123-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fluida/fluida-188-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magone/magone-90-reflected-cross-site-scripting 2026-04-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homelancer/homelancer-101-missing-authorization 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/justicia/justicia-lawyer-wordpress-theme-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/addison/addison-148-unauthenticated-php-object-injection 2025-09-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carspot/carspot-246-reflected-cross-site-scripting 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spare/spare-17-cross-site-request-forgery 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/big-store/big-store-208-missing-authorization 2025-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-wordpress-70-missing-authorization-to-unauthenticated-arbitrary-options-deletion 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unicamp/unicamp-263-unauthenticated-local-file-inclusion 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magazine-saga/magazine-saga-127-unauthenticated-local-file-inclusion 2025-08-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/softme/softme-1124-missing-authorization 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medicenter/medicenter-health-medical-clinic-wordpress-theme-146-missing-authorization 2025-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-859-unauthenticated-limited-local-file-inclusion 2024-12-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blixed/blix-091-blixed-10-blixkrieg-22-reflected-cross-site-scripting 2007-07-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tiger/tiger-20-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenville/greenville-private-school-university-education-wordpress-theme-132-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/curly/curly-33-authenticated-subscriber-insecure-direct-object-reference 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/meloo/meloo-282-authenticated-subscriber-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/theflash/the-flash-115-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/civi/civi-job-board-freelance-marketplace-wordpress-theme-224-missing-authorization 2026-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sahifa/sahifa-240-cross-site-request-forgery 2013-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsup/newsup-5010-missing-authorization-to-authenticated-subscriber-plugin-installation 2025-10-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dom/dom-124-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bakes-and-cakes/bakes-and-cakes-129-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/drift/drift-150-authenticated-contributor-stored-cross-site-scripting-via-post-title 2026-02-18T15:05:38.000Z https://wordsec.net/vulnerabilities/themes/onair2/qt-kentharadio-202-onair2-3992-server-side-request-forgery-remote-file-inclusion 2021-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/karzo/karzo-26-unauthenticated-local-file-inclusion 2025-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/scape/scape-multipurpose-wordpress-theme-1516-unauthenticated-arbitrary-file-deletion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/liquido/liquido-1012-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/frames/frames-157-missing-authorization 2025-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/orpheus/orpheus-13-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gita/gita-111-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/marra/marra-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fleur/fleur-20-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sanzo/sanzo-243-authenticated-subscriber-stored-cross-site-scripting 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wphrm/wphrm-human-resource-management-system-11-sql-injection 2017-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elegant-grunge/elegant-grunge-103-cross-site-scripting 2011-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/auramart/auramart-207-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/puzzles/puzzles-wp-magazine-review-with-store-wordpress-theme-rtl-424-unauthenticated-php-object-injection 2025-02-12T16:10:16.000Z https://wordsec.net/vulnerabilities/themes/triss/triss-26-reflected-cross-site-scripting 2025-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coachify/coachify-107-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-theme-331-stored-cross-site-scripting 2023-02-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-514-cross-site-request-forgery 2017-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/north-wp/north-575-authenticated-contributor-php-object-injection 2026-01-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fotawp/fota-wp-141-missing-authorization-via-fotawp_install_and_activate_plugins 2024-08-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/palatio/palatio-16-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/imba/imba-150-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sydney/sydney-256-missing-authorization-to-authenticated-subscriber-limited-theme-options-update 2025-09-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/constructor/constructor-165-missing-authorization 2025-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adventure-journal/adventure-journal-172-authenticated-contributor-stored-cross-site-scripting 2024-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kalium/kalium-3183-cross-site-request-forgery 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coaching/coaching-392-unauthenticated-stored-cross-site-scripting 2026-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ambience/ambience-unspecified-versions-cross-site-scripting 2013-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hestia/hestia-312-cross-site-request-forgery-to-notice-dismissal 2024-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/perfect-portfolio/perfect-portfolio-120-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/moneymasters/moneymasters-all-versions-arbitrary-file-upload 2012-03-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/builty/multiple-themes-by-bslthemes-various-version-unauthenticated-local-file-inclusion 2025-05-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pixgraphy/pixgraphy-138-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-709-reflected-cross-site-scripting 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-2910-unauthenticated-local-file-inclusion 2025-09-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/wp-pro-real-estate-7-311-reflected-cross-site-scripting 2021-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bailly/bailly-134-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ivy-school/ivyprep-160-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/i-amaze/i-amaze-137-cross-site-request-forgery 2024-07-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grit/grit-life-coach-business-coaching-wordpress-theme-101-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/felici/felici-premium-magazine-theme-17-cross-site-scripting 2013-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/airin-blog/airin-blog-162-unauthenticated-php-object-injection 2024-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-823-authenticated-contributor-local-file-inclusion 2025-07-07T17:24:44.000Z https://wordsec.net/vulnerabilities/themes/valenti/valenti-5635-authenticated-contributor-php-object-injection 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/molla/molla-1513-unauthenticated-remote-code-execution 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/porto/porto-710-unauthenticated-local-file-inclusion-via-porto_ajax_posts 2024-05-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photome/photome-571-unauthenticated-stored-cross-site-scripting 2026-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/archicon/archicon-17-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/holmes/holmes-17-authenticated-subscriber-insecure-direct-object-reference 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsmag/newsmag-50-reflected-cross-site-scripting 2021-07-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/quantum/quantum-10-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/belfort/belfort-10-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photocrati-theme/photocrati-unknown-versions-multiple-vulnerabilities 2013-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shopwell/shopwell-1011-missing-authorization 2026-02-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/healer/healer-doctor-clinic-medical-wordpress-100-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/muzicon/muzicon-190-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Divi/divi-4231-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-3153-authenticated-contributor-php-object-injection 2026-06-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/entrada/entrada-577-cross-site-request-forgery 2025-09-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/townhub/townhub-129-reflected-cross-site-scripting 2020-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/presssmart/pressmart-1226-unauthenticated-php-object-injection 2026-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vex/vex-129-authenticated-subscriber-php-object-injection 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/quota/easy-digital-downloads-quota-125-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mediclinic/mediclinic-21-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/emojination/emojination-1012-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lendiz/lendiz-201-authenticated-subscriber-arbitrary-file-upload 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woohoo/woo-hoo-125-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4210-authenticated-contributor-arbitrary-folder-deletion 2025-07-25T19:04:17.000Z https://wordsec.net/vulnerabilities/themes/sanger/sanger-1240-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/buisson/buisson-1111-unauthenticated-php-object-injection 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/melodyschool/melody-163-unauthenticated-php-object-injection 2026-03-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sweetjane/sweet-jane-delightful-cake-shop-theme-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bard/bard-2216-reflected-cross-site-scripting-via-add_query_arg-parameter 2024-11-18T23:46:49.000Z https://wordsec.net/vulnerabilities/themes/noo-wemusic/wemusic-191-authenticated-subscriber-php-object-injection 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rosebud/rosebud-flower-shop-and-florist-wordpress-theme-14-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/werkstatt/werkstatt-creative-portfolio-wordpress-theme-472-missing-authorization 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/imperial-fairytale/imperial-fairytale-theme-all-versions-multiple-vulnerabilities 2013-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-775-authenticated-editor-arbitrary-file-upload 2026-03-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/creatify/creatify-15-unauthenticated-php-object-injection 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/everest-news/cream-blog-fascinate-glaze-blog-lite-everest-news-all-versions-cross-site-scripting 2023-01-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/overton/overton-13-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rezo/multiple-themify-themes-various-versions-authenticated-contributor-arbitrary-file-upload 2025-04-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/energox/energox-12-authenticated-subscriber-arbitrary-file-deletion 2026-03-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/muji/muji-120-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realtyelite/realtyelite-100-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prolingua/prolingua-1112-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oceanwp/oceanwp-409-411-cross-site-request-forgery-to-ocean-extra-plugin-installation 2025-08-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xsmart/xsmart-1294-reflected-cross-site-scripting 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workreap/workreap-222-cross-site-request-forgery 2021-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wibar/wibar-wine-and-vineyard-woocommerce-wordpress-theme-121-cross-site-scripting 2020-11-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chapterone/chapterone-17-unauthenticated-local-file-inclusion 2026-04-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dolcino/dolcino-16-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yaaburnee-themes/yaaburnee-107-and-dignitas-119-privilege-escalation 2015-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/iona/iona-108-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zota/zota-138-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/joly/joly-1220-unauthenticated-local-file-inclusion 2025-10-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vidorev/vidorev-2999997-unauthenticated-local-file-inclusion 2026-02-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grace-mag/grace-mag-115-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/geomagazine/geo-magazine-theme-20-reflected-cross-site-scripting 2020-08-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vikinger/vikinger-1930-authenticated-subscriber-privilege-escalation-via-vikinger_user_meta_update_ajax 2025-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-monday/accesspress-themes-and-plugin-various-versions-missing-authorization-to-arbitrary-plugin-deactivationactivation 2022-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/DA10/dating-1120-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/midi/midi-sound-music-wordpress-theme-114-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/struktur/struktur-creative-agency-wordpress-theme-251-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/plant/plant-gardening-houseplants-wordpress-theme-100-unauthenticated-information-exposure 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prolist/prolisting-directory-listing-12-reflected-cross-site-scripting 2020-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/daiquiri/daiquiri-124-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aalto/aalto-18-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/home-services/home-services-126-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dj-rainflow/dj-rainflow-1313-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsblogger/newsblogger-0256-0261-cross-site-request-forgery-to-arbitrary-plugin-installation 2026-02-18T15:08:47.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-853-unauthenticated-stored-cross-site-scripting 2026-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/saxon/saxon-viral-content-blog-magazine-marketing-wordpress-193-unauthenticated-local-file-inclusion 2025-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/urbancity/urban-city-all-versions-arbitrary-file-download 2014-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edumall/edumall-professional-lms-education-center-wordpress-theme-451-missing-authorization 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-938-unauthenticated-local-file-inclusion 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/orchid-store/orchid-store-1515-missing-authorization 2026-01-12T13:03:21.000Z https://wordsec.net/vulnerabilities/themes/newsdaily/newsdaily-1064-authenticated-contributor-stored-cross-site-scripting 2024-12-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/emphires/emphires-39-authenticated-contributor-local-file-inclusion 2026-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pont/pont-15-arbitrary-options-update 2015-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ashe/ashe-2267-missing-authorization 2026-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mogi/mogi-123-missing-authorization 2026-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nika/nika-128-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/accio-one-page/accio-responsive-onepage-parallax-site-template-111-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nexter/nexter-203-authenticated-subscriber-sql-injection-via-to-and-from 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/excellent/excellent-129-authenticated-contributor-stored-cross-site-scripting 2024-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newseqo/newseqo-211-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zegen/zegen-church-wordpress-theme-119-missing-authorization-to-authenticated-subscriber-theme-options-updates 2025-03-13T16:37:52.000Z https://wordsec.net/vulnerabilities/themes/supreme-directory/supreme-directory-119-cross-site-scripting 2018-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oberliga_theme/oberliga-theme-all-versions-sql-injection 2012-12-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-261-arbitrary-plugin-installation-activation-and-deactivation 2020-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-319-authenticated-contributor-local-file-inclusion-via-shortcode 2025-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zita/zita-165-unauthenticated-local-file-inclusion 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dricub-driving-school/dricub-29-missing-authorization 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-761-unauthenticated-stored-cross-site-scripting 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandblog/grand-blog-315-unauthenticated-server-side-request-forgery 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shapeless/shapeless-11-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gamic/gamic-115-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wprentals/rentals-3131-cross-site-request-forgery 2025-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/big-store/big-store-193-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workreap/workreap-theme-222-authorization-bypass 2021-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brightbox/brightbox-unknown-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/resca/resca-302-reflected-cross-site-scripting 2025-09-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogzee/blogzee-105-authenticated-subscriber-arbitrary-file-upload 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogmatic/blogmatic-103-authenticated-subscriber-arbitrary-file-upload 2025-10-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/loobek/loobek-152-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-591-reflected-cross-site-scripting 2023-12-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/famous/famous-all-versions-arbitrary-file-upload 2012-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/netmix/netmix-1010-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/food-drop/food-drop-13-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/materialis/materialis-1124-missing-authorization-to-limited-arbitrary-options-update 2024-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/noo-jobmonster-4529-reflected-cross-site-scripting 2019-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sandbox/sandbox-161-arbitrary-file-upload 2013-01-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wprentals/wp-rentals-3161-authenticated-contributor-stored-cross-site-scripting 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kute-boutique/boutique-233-authenticated-contributor-local-file-inclusion 2026-02-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/superio/superio-job-board-1232-authenticated-subscriber-stored-cross-site-scripting 2022-12-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/andyblue/andyblue-theme-15-cross-site-scripting 2007-06-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/customify/customify-0411-cross-site-request-forgery 2025-10-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/scientia/scientia-124-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/asia-garden/asia-garden-131-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-243-cross-site-request-forgery-to-user-verification 2025-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dejavu/dejavu-24-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cookiteer/cookiteer-148-authenticated-subscriber-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zota/zota-1314-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-390-cross-site-scripting 2020-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/madara/madara-responsive-and-modern-wordpress-theme-for-manga-sites-222-unauthenticated-local-file-inclusion 2025-05-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/glossy-blog/glossy-blog-103-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobify/jobify-job-board-wordpress-theme-430-cross-site-request-forgery 2024-11-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/phlox/phlox-2177-authenticated-contributor-stored-cross-site-scripting-via-data-caption-html-attribute 2026-01-05T17:35:55.000Z https://wordsec.net/vulnerabilities/themes/spock/spock-117-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colormag/colormag-316-authenticated-contributor-stored-cross-site-scripting-via-display-name 2024-03-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coldfusion/coldfusion-responsive-fullscreen-video-image-audio-theme-12-arbitrary-file-upload 2013-10-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-subscriber-arbitrary-file-deletion 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fitness-park/fitness-park-111-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-351-unauthenticated-privilege-escalation-to-administrator 2025-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careplus/careplus-health-medical-responsive-wordpress-theme-12-cross-site-scripting 2020-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oneline-lite/oneline-lite-66-missing-authorization 2026-01-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/empowerwp/empowerwp-1021-cross-site-request-forgery-to-notice-dismissal 2024-05-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/intothedark/intothedark-105-reflected-cross-site-scripting 2024-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-chocolate/chocolate-wp-responsive-photography-theme-all-versions-arbitrary-file-upload 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/legal-stone/legal-stone-1211-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rosalinda/rosalinda-123-unauthenticated-local-file-inclusion 2025-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/accio/accio-responsive-onepage-parallax-agency-wordpress-theme-110-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/amoveo/amoveo-multipurpose-wordpress-theme-20-arbitrary-file-upload 2013-11-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reina/reina-21-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ratatouille/ratatouille-126-authenticated-subscriber-server-side-request-forgery 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandconference/grand-conference-534-reflected-cross-site-scripting 2026-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sala/sala-116-unauthenticated-local-file-inclusion 2025-08-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kratz/kratz-1012-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mystique/mystique-257-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/meris/meris-112-reflected-cross-site-scripting 2024-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-chocolate/chocolate-wp-responsive-photography-theme-all-versions-denial-of-service-and-abuse-of-functionality 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/konte/konte-246-missing-authorization 2026-01-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dricub-driving-school/dricub-29-unauthenticated-server-side-request-forgery 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-867-unauthenticated-arbitrary-shortcode-execution 2025-08-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/setsail/setsail-18-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dwell/dwell-170-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/opor-ayam/opor-ayam-18-reflected-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7111-authenticatedcontributor-arbitrary-file-upload-via-ajax_import_options 2023-08-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gamezone/gamezone-1111-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/diveit/diveit-143-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-next/the-next-110-authenticated-contributor-php-object-injection 2024-08-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-404-missing-authorization 2025-07-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snssimen/simen-46-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/source/source-all-versions-cross-site-scripting 2013-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2756-authenticated-contributor-php-object-injection 2024-08-29T16:01:16.000Z https://wordsec.net/vulnerabilities/themes/cozipress/cozipress-1032-authenticated-contributor-stored-cross-site-scripting 2024-07-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/onetone/onetone-306-onetone-companion-111-unauthenticated-settings-update 2020-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/urna/urna-257-unauthenticated-local-file-inclusion 2025-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realhomes/rh-real-estate-wordpress-theme-440-authenticated-subscriber-privilege-escalation 2025-06-09T14:53:33.000Z https://wordsec.net/vulnerabilities/themes/qt-kentharadio/kentharadio-220-reflected-cross-site-scripting 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reconstruction/reconstruction-147-reflected-cross-site-scripting 2024-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zentrum/zentrum-10-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/forumengine/forumengine-18-reflected-cross-site-scripting 2024-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mavix-education/mavix-education-10-missing-authorization-to-authenticated-subscriber-creativ-demo-importer-plugin-activation 2025-12-12T15:29:59.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-42-cross-site-request-forgery 2024-11-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/avanix/imediapixel-themes-various-versions-cross-site-scripting 2012-10-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bloggie/bloggie-208-unauthenticated-stored-cross-site-scripting 2025-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nanomag/nanomag-18-unauthenticated-stored-cross-site-scripting 2026-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/visual-arts/visual-art-gallery-wordpress-theme-24-authenticated-subscriber-php-object-injection 2025-07-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hobo/hobo-1010-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/astra/astra-464-authenticated-editor-stored-cross-site-scripting-via-theme-headerfooter 2024-03-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4220-authenticated-contributor-arbitrary-file-upload 2025-09-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/qreatix/qreatix-194-unauthenticated-stored-cross-site-scripting 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/buddyboss-theme/buddyboss-theme-2461-cross-site-request-forgery 2024-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newspaper-x/epsilon-framework-themes-various-versions-unauthenticated-plugin-activationdeactivation 2020-10-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workreap/workreap-263-insecure-direct-object-reference 2022-12-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-938-reflected-cross-site-scripting 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-964-unauthenticated-arbitrary-shortcode-execution 2026-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sala/sala-startup-saas-wordpress-theme-114-unauthenticated-privilege-escalation-via-password-resetaccount-takeover 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/petsland/pets-land-128-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-to-post-status-change 2022-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pawfriends/pawfriends-pet-shop-and-veterinary-wordpress-13-authenticated-subscriber-insecure-direct-object-reference 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/coleo/coleo-117-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rife-free/rife-free-2418-cross-site-request-forgery-to-notice-dismissal 2024-07-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pearsonspecter/pearson-specter-1113-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/motors/motors-5682-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-installation 2025-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/insurance/insurance-35-authenticated-subscriber-php-object-injection 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blueprint/blueprint-115-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stockholm/stockholm-96-unauthenticated-local-file-inclusion 2024-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/persuasion/persuasion-24-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alliance/alliance-311-unauthenticated-local-file-inclusion 2026-02-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stockholm/stockholm-9141-authenticated-contributor-stored-cross-site-scripting 2025-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/invento/invento-architecture-building-agency-template-2015-05-15-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/patiotime/patiotime-21-unauthenticated-local-file-inclusion 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/frappe/frapp-18-unauthenticated-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wellspring/wellspring-28-unauthenticated-local-file-inclusion 2026-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bfres/bfres-121-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lawyer-landing-page/lawyer-landing-page-124-cross-site-request-forgery-to-notice-dismissal 2024-07-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dentalux/dentalux-dentist-healthcare-site-template-33-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/renden/renden-181-authenticated-contributor-stored-cross-site-scripting-via-post-title 2026-02-18T15:22:33.000Z https://wordsec.net/vulnerabilities/themes/windsor/windsor-250-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/metro-magazine/metro-magazine-141-missing-authorization 2026-04-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kuteshop/kuteshop-429-authenticated-contributor-local-file-inclusion 2026-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/angel/angel-fashion-model-agency-wordpress-cms-theme-323-authenticated-subscriber-stored-cross-site-scripting 2025-11-12T20:19:15.000Z https://wordsec.net/vulnerabilities/themes/filmix/filmix-11-reflected-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jupiter/jupiter-theme-6101-authenticated-arbitrary-plugin-deletion 2022-05-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-326-authenticated-subscriber-sql-injection 2025-11-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-conference/the-conference-120-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mags/mags-116-unauthenticated-local-file-inclusion 2024-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thisway/thisway-170-arbitrary-file-upload 2013-11-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/custom-community/custom-community-20-2024-stored-cross-site-scripting 2015-03-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tastyc/tastyc-252-unauthenticated-local-file-inclusion 2025-04-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woostify/woostify-242-authenticated-shop-manager-stored-cross-site-scripting 2025-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/everest-news/everest-news-110-reflected-cross-site-scripting 2023-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/leblix/leblix-24-unauthenticated-local-file-inclusion 2025-09-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/notarius/notarius-legal-advisor-wordpress-theme-19-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/astra/astra-4123-authenticated-contributor-stored-cross-site-scripting-via-post-meta 2026-03-10T17:27:37.000Z https://wordsec.net/vulnerabilities/themes/billey/billey-216-unauthenticated-local-file-inclusion 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sandbox/sandbox-161-full-path-disclosure 2013-01-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mrseo/mr-seo-20-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sailing/sailing-446-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/beelove/beelove-honey-production-and-sweets-online-store-wordpress-theme-126-unauthenticated-php-object-injection 2026-03-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/theaisle/the-aisle-291-unauthenticated-local-file-inclusion 2026-01-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/15zine/15zine-magazine-newspaper-blog-news-wordpress-theme-330-reflected-cross-site-scripting 2020-09-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/modernhousewife/modern-housewife-1012-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/innovio/innovio-17-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pinfinity/pinfinity-192-reflected-cross-site-scripting 2017-09-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/indutri/indutri-130-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eventicity/eventicity-15-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bootstrap-ultimate/bootstrap-ultimate-149-unauthenticated-limited-local-file-inclusion 2025-01-23T19:34:21.000Z https://wordsec.net/vulnerabilities/themes/modern/modern-141-cross-site-scripting 2015-05-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/athos/athos-19-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/axioma/axioma-premium-responsive-112-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gecko/gecko-60-responsive-shopify-theme-rtl-support-198-reflected-cross-site-scripting 2026-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-964-authenticated-contributor-stored-cross-site-scripting 2026-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tonda/tonda-25-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/broadscope/broadscope-unknown-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hypnotherapy/hypnotherapy-psychologist-theme-1210-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wanderland/wanderland-travel-blog-15-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7132-cross-site-request-forgery 2026-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-citilights/support-for-citilights-real-estate-wordpress-theme-371-authenticated-subscriber-php-object-injection 2026-03-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/upscale/upscale-unknown-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eduma/eduma-564-missing-authorization 2025-04-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magone/magone-88-reflected-cross-site-scripting 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/redart/red-art-38-authenticated-subscriber-php-object-injection 2025-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homevillas-real-estate/home-villas-real-estate-wordpress-theme-28-authenticated-subscriber-arbitrary-file-deletion 2025-07-01T14:57:19.000Z https://wordsec.net/vulnerabilities/themes/dr-patterson/drpatterson-132-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sarada-lite/sarada-lite-112-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-multipurpose-woocommerce-theme-826-improper-input-validation-leading-to-unauthenticated-cart-manipulation 2025-07-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/triple-seven/777-13-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nooni/nooni-151-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lms/lms-97-reflected-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/helion/helion-personal-portfolio-agency-wordpress-theme-1112-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sounder/sounder-internet-radio-streaming-elementor-template-kit-1311-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-199-missing-authorization-to-unauthenticated-user-token-generation 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/almera/almera-responsive-portfolio-site-template-118-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/total/total-221-authenticated-contributor-stored-cross-site-scripting-via-post-title-in-blog-section-image-alt-attribute 2026-05-01T20:29:33.000Z https://wordsec.net/vulnerabilities/themes/ask-me/ask-me-681-cross-site-request-forgery 2022-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colormag/colormag-4019-missing-authorization-to-authenticated-subscriber-themegrill-demo-importer-plugin-installation 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-752-missing-authorization 2025-01-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/saveo/saveo-112-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/platform/platform-4-114-cross-site-request-forgery 2016-11-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-automobile-lite/vw-automobile-lite-212-missing-authorization 2024-12-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-416-authenticated-subscriber-php-object-injection-via-saved-search 2025-11-26T00:01:46.000Z https://wordsec.net/vulnerabilities/themes/ciyashop/ciyashop-4180-unauthenticated-php-object-injection 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dazzle/dazzle-100-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-1961-authenticated-subscriber-sql-injection 2024-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sevenstars/seven-stars-144-reflected-cross-site-scripting 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenify/greenify-22-unauthenticated-local-file-inclusion 2025-09-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/druco/druco-152-reflected-cross-site-scripting 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gat/gat-116-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandcarrental/grand-car-rental-limousine-html-template-37-unauthenticated-stored-cross-site-scripting 2026-05-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-4970-missing-authorization 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/5star/5-star-10-cross-site-request-forgery-to-arbitrary-file-upload 2014-03-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listify/listify-325-cross-site-request-forgery 2025-10-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2022-cross-site-request-forgery 2024-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-education-lite/vw-education-lite-220-missing-authorization 2026-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kahuna/kahuna-170-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/js-o3-lite/js-o3-lite-1582-reflected-cross-site-scripting 2025-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workreap/workreap-263-insecure-direct-objection-reference-to-private-message-disclosure 2022-11-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/storely/storely-18-authenticated-contributor-stored-cross-site-scripting 2025-01-30T00:54:29.000Z https://wordsec.net/vulnerabilities/themes/minimog/minimogwp-the-high-converting-ecommerce-wordpress-theme-370-unauthenticated-local-php-file-inclusion 2025-03-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himer/himer-210-cross-site-request-forgery-to-poll-voting 2024-06-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pearl/pearl-corporate-business-3410-unauthenticated-local-file-inclusion 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/architecturer/architecturer-395-reflected-cross-site-scripting 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/classic/classic-15-cross-site-scripting 2007-08-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/DA10/dating-1120-cross-site-request-forgery 2025-12-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zoxpress/zoxpress-the-all-in-one-wordpress-news-theme-2120-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2025-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/theron-lite/theron-lite-20-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-06-27T20:13:12.000Z https://wordsec.net/vulnerabilities/themes/pliska/pliska-035-authenticated-contributor-stored-cross-site-scripting-via-author-display-name 2024-04-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/machic-core/machic-core-126-reflected-cross-site-scripting 2023-12-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colormix/colormix-all-versions-multiple-vulnerabilities 2013-04-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/easybook/cththemes-citybook-theme-234-townhub-theme-106-easybook-theme-122-cross-site-scripting 2019-12-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/childhope/childhope-118-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newscrunch/newscrunch-184-authenticated-subscriber-arbitrary-file-upload 2025-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-609-authenticated-subscriber-server-side-request-forgery-via-attachment_id 2025-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/allegiant/allegiant-127-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wanium/wanium-198-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/scape/scape-1513-unauthenticated-php-object-injection 2025-09-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kids-online-store/kids-online-store-089-authenticated-subscriber-arbitrary-file-upload 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nanocare/nanocare-122-missing-authorization 2026-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/almera/almera-responsive-portfolio-site-template-2015-05-15-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/planmyday/plan-my-day-1113-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smash/smash-17-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ciyashop/ciyashop-multipurpose-woocommerce-theme-4190-unauthenticated-php-object-injection 2025-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/crafti/crafti-handmade-store-wordpress-theme-112-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nexos/nexos-real-estate-wordpress-theme-17-sql-injection 2020-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/indoor-plants/indoor-plants-127-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flashlight/flashlight-284-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lettuce/lettuce-117-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/th-shop-mania/th-shop-mania-149-authenticated-subscriber-arbitrary-plugin-installationactivation 2024-11-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nirvana/nirvana-26-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bravada/bravada-112-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cww-portfolio/cww-portfolio-131-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neon/neon-bootstrap-admin-theme-20-cross-site-scripting 2019-12-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/motor/motor-cars-parts-service-equipments-and-accessories-woocommerce-store-310-local-file-inclusion 2021-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eldon/eldon-artist-portfolio-wordpress-theme-141-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/iloveit/i-love-it-24-multiple-vulnerabilities 2013-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/tagdiv-composer-35-unauthorized-account-access-and-privilege-escalation 2022-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/takeout/takeout-130-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/area53/area53-105-arbitrary-file-upload 2013-10-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/save-life/save-life-1213-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/septera/septera-151-authenticated-contributor-stored-cross-site-scripting 2024-09-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kingler/kingler-17-unauthenticated-php-object-injection 2026-02-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-check-on-core-functionality 2022-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/optimizepress/optimizepress-16-arbitrary-file-upload 2013-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/theissue/the-issue-1611-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsmash/newsmash-1034-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/classiera/classiera-4034-unauthenticated-sql-injection 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/squaretype/squaretype-modern-blog-wordpress-theme-304-authorization-bypass 2021-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/full-frame/full-frame-272-authenticated-author-stored-cross-site-scripting 2024-09-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/webstack/webstack-12024-unauthenticated-arbitrary-file-upload 2026-04-14T14:52:49.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-196-unauthenticated-remote-code-execution 2024-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smartmag-responsive-retina-wordpress-magazine/smartmag-1010-unauthenticated-sensitive-information-exposure-via-log-files 2024-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/audrey/audrey-15-unauthenticated-local-file-inclusion 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-261-sensitive-information-disclosure 2020-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/restaurante/restaurante-307-reflected-cross-site-scripting 2025-08-10T02:02:04.000Z https://wordsec.net/vulnerabilities/themes/moneytheme/moneytheme-all-versions-arbitrary-file-upload 2013-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-1101-authenticated-bricks-page-builder-access-stored-cross-site-scripting 2024-09-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eco-nature/eco-nature-environment-ecology-wordpress-theme-204-missing-authorization-to-authenticated-subscriber-limited-options-update 2025-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/handyman-services/handyman-14-unauthenticated-php-object-injection 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/togo/togo-travel-tour-booking-wordpress-theme-theme-104-missing-authorization 2025-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bicycleshop/bicycleshop-15-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magways/magways-121-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-wordpress-70-unauthenticated-php-object-injection 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/swagger/themeblvd-themesplugins-various-versions-missing-authorization-checks 2014-11-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/findgo/findgo-1357-cross-site-request-forgery 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/everest-news-pro/everest-news-pro-117-reflected-cross-site-scripting 2023-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thecotton_v114/thecotton-114-arbitrary-file-upload 2014-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rapyd-payments/rapyd-payment-extension-for-woocommerce-120-unauthenticated-php-object-injection 2025-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/savoy/savoy-308-unauthenticated-information-exposure 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zakra/zakra-420-authenticated-contributor-stored-cross-site-scripting-via-post-meta-rest-api 2026-07-02T19:01:25.000Z https://wordsec.net/vulnerabilities/themes/zota/zota-1314-authenticated-contributor-local-file-inclusion 2025-12-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photome/photome-5611-unauthenticated-php-object-injection 2026-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/weaver-xtreme/weaver-xtreme-630-authenticated-contributor-stored-cross-site-scripting 2024-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenly/greenly-81-authenticated-contributor-local-file-inclusion 2026-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/healsoul/healsoul-223-unauthenticated-local-file-inclusion 2025-05-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/armania/armania-148-unauthenticated-arbitrary-shortcode-execution 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/couponxxl/couponxxl-300-unauthenticated-privilege-escalation 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-agency/travel-agency-155-missing-authorization 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listeo/listeo-directory-listings-with-booking-wordpress-theme-1611-cross-site-scripting 2021-02-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsmatic/newsmatic-134-unauthenticated-information-exposure-via-newsmatic_filter_posts_load_tab_content 2024-03-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hestia/hestia-3210-missing-authorization 2025-07-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cars4rent/cars4rent-142-unauthenticated-php-object-injection 2025-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/authentic/authentic-204-arbitrary-file-download 2014-09-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem-elementor/thegem-elementor-5105-authenticated-subscriber-stored-cross-site-scripting 2025-09-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grecko/grecko-517-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dwt-listing/dwt-directory-listing-wordpress-theme-334-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/strux/strux-19-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/swape/swape-app-showcase-app-store-wordpress-theme-121-missing-authorization-to-arbitrary-options-update 2018-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pizzahouse/pizza-house-140-unauthenticated-php-object-injection 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sala/sala-113-missing-authorization 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/besa/besa-2315-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gable/gable-15-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hiroshi/hiroshi-151-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ekommart/ekommart-431-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/conquerors/conquerors-american-football-nfl-psd-template-1213-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/miraculous/miraculous-209-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2025-09-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/civi/civi-job-board-freelance-marketplace-wordpress-theme-2161-authentication-bypass 2025-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fish-house/fish-house-127-unauthenticated-php-object-injection 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tinysalt/tinysalt-3100-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/formula/formula-051-reflected-cross-site-scripting-via-quality_customizer_notify_dismiss_action 2024-06-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/goodnex/goodnex-responsive-html5css3-site-template-113-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3175-unauthenticated-php-object-injection 2023-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-instructor-arbitrary-file-upload 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-contributor-arbitrary-file-upload 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7111-missing-authorization 2023-08-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Divi/divi-4202-authenticated-contributor-stored-cross-site-scripting 2023-05-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/persuasion/persuasion-24-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hillter/hillter-307-authenticated-subscriber-php-object-injection 2025-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2050-authenticated-contributor-stored-cross-site-scripting 2024-06-04T19:06:12.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-responsive-multi-purpose-theme-484-reflected-cross-site-scripting 2021-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-609-authentication-bypass-to-admin 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bazinga/bazinga-119-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-booking-and-rentals-wordpress-theme-244-missing-authorization-to-authenticated-subscriber-arbitrary-reservation-post-deletion 2025-05-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/setsail/setsail-travel-agency-wordpress-theme-21-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/beauty/beauty-114-authenticated-subscriber-stored-cross-site-scripting-via-tpl_featured_cat_id-parameter 2024-09-12T21:28:57.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2675-reflected-cross-site-scripting 2023-04-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/platform/platform-144-missing-authorization-to-unauthenticated-arbitrary-options-update 2015-01-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/doctreat/doctreat-167-authenticated-subscriber-arbitrary-shortcode-execution 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vixus/vixus-business-startup-elementor-template-kit-1016-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aqualots/aqualots-116-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pawfriends/pawfriends-pet-shop-and-veterinary-wordpress-13-cross-site-request-forgery 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ostende/ostende-143-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/onetone/onetone-306-onetone-companion-111-stored-cross-site-scripting 2020-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-772-reflected-cross-site-scripting 2025-11-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/riode/riode-multi-purpose-woocommerce-1623-unauthenticated-local-file-inclusion 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveltour/travel-tour-524-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bello/bello-directory-listing-160-cross-site-scripting 2021-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fana/fana-1135-authenticated-contributor-local-file-inclusion 2025-12-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wibar/wibar-118-authenticated-author-stored-cross-site-scripting 2026-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stockholm/stockholm-96-authenticated-contributor-local-file-inclusion 2024-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tempera/tempera-182-authenticated-contributor-stored-cross-site-scripting 2024-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/single-property/single-property-28-authenticated-subscriber-php-object-injection 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/convex/convex-111-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kathmag/multiple-sparklewpthemes-themes-various-versions-missing-authorization-to-arbitrary-plugin-activation 2023-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neresa-wp/neresa-13-unauthenticated-local-file-inclusion 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prestige/prestige-141-unauthenticated-php-object-injection 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dor/dr-modern-architecture-and-interior-design-theme-241-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/esteem/esteem-150-authenticated-author-stored-cross-site-scripting 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-199-unauthenticated-privilege-escalation 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/biagiotti/biagiotti-352-unauthenticated-local-file-inclusion 2026-01-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogbyte/blogbyte-111-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pool-services/pool-services-33-unauthenticated-server-side-request-forgery 2025-11-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-website-and-ecommerce-builder-for-wordpress-11130-authenticated-contributor-stored-cross-site-scripting-via-url-attribute 2024-06-24T21:29:55.000Z https://wordsec.net/vulnerabilities/themes/Blooog-v1.1/bloog-11-cross-site-scripting 2013-12-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/freesia-empire/freesia-empire-141-authenticated-contributor-stored-cross-site-scripting 2024-04-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homeroofer/homeroofer-2110-unauthenticated-local-file-inclusion 2025-10-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/revolution/revolution-258-authenticated-subscriber-local-file-inclusion 2025-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/total/total-theme-2119-authenticatedsubscriber-plugin-activation 2023-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/saaslauncher/saaslauncher-130-missing-authorization 2025-09-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/laurent/laurent-elegant-restaurant-wordpress-theme-31-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/itactics/itactics-10-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/art-theme/art-theme-31223-missing-authorization-to-authenticated-subscriber-theme-option-delete 2025-06-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/apicona/apicona-2410-authenticated-subscriber-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/evently/evently-17-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/scylla-lite/scylla-lite-183-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-06-27T20:12:55.000Z https://wordsec.net/vulnerabilities/themes/striking-r/striking-234-authenticated-contributor-local-file-inclusion 2024-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photocrati-theme/photocrati-480-cross-site-scripting 2014-01-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aperitif/aperitif-15-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noisa/noisa-260-unauthenticated-php-object-injection 2025-10-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobscout/jobscout-114-cross-site-request-forgery-to-notice-dimissal 2024-06-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magty/magty-106-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/biolife/biolife-323-authenticated-contributor-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kitchor/kitchor-143-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/salem/salem-theme-155-dom-based-cross-site-scripting 2015-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wr-nitro/nitro-by-woorockets-179-missing-authorization-to-arbitrary-plugin-installation 2021-11-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/charety/charety-202-authenticated-subscriber-arbitrary-file-upload 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yourjourney/your-journey-198-prototype-pollution-to-reflected-cross-site-scripting 2023-07-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/partymaker/partymaker-1115-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-wedding/vw-wedding-137-missing-authorization 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/catch-base/catch-base-346-authenticated-author-stored-cross-site-scripting 2024-09-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/logistics-hub/logisticshub-116-unauthenticated-arbitrary-file-upload 2025-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-fitness/vw-fitness-434-missing-authorization 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/foodie/foodie-114-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/car-repair-service/car-repair-services-auto-mechanic-40-reflected-cross-site-scripting 2021-05-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rara-business/rara-business-130-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/amplus/amplus-unspecified-version-cross-site-request-forgery 2013-11-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/modernee/modernee-160-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-973-unauthenticated-sql-injection 2026-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-travel-booking-wordpress-theme-2786-cross-site-scripting 2020-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sw_maxshop/maxshop-3620-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/couponxl/couponxl-450-unauthenticated-privilege-escalation 2025-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bajaar/bajaar-highly-customizable-woocommerce-wordpress-210-unauthenticated-local-file-inclusion 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/freshio/freshio-242-authenticated-contributor-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medizin/medizin-197-unauthenticated-local-file-inclusion 2025-07-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vapester/vapester-1110-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ultrapress/ultrapress-122-authenticated-contributor-php-object-injection 2024-09-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listihub/listihub-106-missing-authorization 2026-01-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/riode/riode-multi-purpose-woocommerce-1629-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cloudme/cloudme-cloud-storage-file-sharing-wordpress-theme-122-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/miti/miti-153-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cardealer/car-dealer-167-unauthenticated-php-object-injection 2025-05-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alright/alright-161-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-175-authenticated-contributor-local-file-inclusion 2026-02-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/multioffice/multioffice-12-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/morningtime-lite/morningtime-lite-132-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zoya/zoya-14-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-monster/travel-monster-133-missing-authorization 2026-01-13T13:56:20.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricksbuilder-1961-authenticated-contributor-privilege-escalation-via-create_autosave 2025-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-704-unauthenticated-arbitrary-content-injection 2023-02-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/resoto/resoto-108-missing-authorization-leading-to-authenticated-subscriber-arbitrary-plugin-activation 2023-03-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grip/grip-109-unauthenticated-local-file-inclusion 2025-04-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/reales-wp-real-estate-wordpress-theme/reales-wp-real-estate-wordpress-theme-212-missing-authorization-to-unauthenticated-attachment-deletion-and-favorite-property-updates 2025-04-23T19:41:25.000Z https://wordsec.net/vulnerabilities/themes/uppercase/uppercase-122-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bw-fitrush/fitrush-134-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-868-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nuss/nuss-hotel-booking-wordpress-136-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mega-store-woocommerce/mega-store-woocommerce-59-missing-authorization-to-authenticated-subscriber-arbitrary-page-creation-and-settings-change 2026-02-18T15:50:48.000Z https://wordsec.net/vulnerabilities/themes/socialv/socialv-social-network-and-community-buddypress-theme-2015-missing-authorization-to-arbitrary-file-download 2025-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/idealauto/idealauto-386-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wproject/wproject-580-missing-authorization-to-unauthenticated-content-modification-and-deletion 2025-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/athens/athens-116-unauthenticated-local-file-inclusion 2026-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/method/method-21-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hostmev2/hostme-v2-70-unauthenticated-arbitrary-file-deletion 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Newspaper/newspaper-news-woocommerce-wordpress-theme-67-arbitrary-options-update 2016-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/themify-ultra/themify-ultra-735-privilege-escalation 2023-10-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobify/jobify-432-unauthenticated-stored-cross-site-scripting 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/buddyboss-theme/buddyboss-theme-2460-missing-authorization 2023-12-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/education-base/education-base-308-missing-authorization 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7116-authenticated-admin-sql-injection-via-entry 2024-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aurum/aurum-wordpress-woocommerce-shopping-theme-402-missing-authorization-to-authenticated-subscriber-demo-content-import 2025-01-06T17:57:20.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7115-authenticatedcontributor-sensitive-information-exposure-via-form-entries 2024-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aldo/aldo-1010-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsxpress/newsxpress-107-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-2910-reflected-cross-site-scripting 2025-09-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sf-booking/service-finder-provider-and-business-listing-theme-32-path-traversal 2018-09-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/amely/amely-314-unauthenticated-sql-injection 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jannah/jannah-newspaper-magazine-news-buddypress-amp-764-unauthenticated-local-file-inclusion 2026-03-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tipsy/tipsy-11-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-website-builder-for-wordpress-woocommerce-7114-authenticated-contributor-arbitrary-file-upload 2024-02-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dekoro/dekoro-107-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/capie/capie-1040-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spare/spare-17-reflected-cross-site-scripting 2025-06-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thena/thena-155-reflected-cross-site-scripting 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ashe/ashe-2243-reflected-cross-site-scripting-via-add_query_arg-parameter 2024-11-18T23:50:20.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2130-authenticated-contributor-stored-cross-site-scripting-via-blocksy_meta-fields 2026-03-02T09:26:54.000Z https://wordsec.net/vulnerabilities/themes/noo-citilights/citilights-372-missing-authorization 2026-02-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xsmart/xsmart-1294-authenticated-subscriber-arbitrary-shortcode-execution 2025-10-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bard/bard-2210-cross-site-request-forgery-to-notice-dismissal 2024-07-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/automotive/automotive-car-dealership-business-wordpress-theme-1341-authenticated-contributor-stored-cross-site-scripting-via-portfolio-project-details 2026-05-28T17:26:48.000Z https://wordsec.net/vulnerabilities/themes/mantra/mantra-332-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/roneous/roneous-creative-multi-purpose-wordpress-theme-215-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-city-travel-guide-wordpress-theme-133-reflected-cross-site-scripting 2020-07-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kindlycare/kindlycare-161-unauthenticated-php-object-injection 2026-01-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/corona/corona-all-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/store-commerce/store-commerce-124-authenticated-contributor-stored-cross-site-scripting 2025-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3187-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/motorix/motorix-16-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/balkon/balkon-132-reflected-cross-site-scripting 2023-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/minimog/minimogwp-the-high-converting-ecommerce-wordpress-theme-390-unauthenticated-price-manipulation 2025-07-25T16:30:16.000Z https://wordsec.net/vulnerabilities/themes/gustavo/gustavo-122-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photolia/photolia-103-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pippo/pippo-123-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pyrmont-v2/pyrmont-v2-207-sql-injection 2009-12-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/entrepreneurx/entrepreneur-booking-for-small-businesses-wordpress-313-authenticated-subscriber-php-object-injection 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jannah/jannah-760-unauthenticated-php-object-injection 2025-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magazine-basic/magazine-basic-unknown-versions-sql-injection 2012-11-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/veda/veda-multipurpose-wordpress-theme-42-authenticated-subscriber-php-object-injection 2025-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/maxinet/maxinet-internet-iptv-provider-elementor-template-kit-1210-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/education/education-center-lms-online-courses-wordpress-theme-3610-php-object-injection 2025-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yolox/yolox-1015-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/parabola/parabola-241-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/etta/etta-1140-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dandelion/dendelion-266-arbitrary-file-upload 2014-01-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/perfect-portfolio/perfect-portfolio-124-missing-authorization 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zoner/zoner-real-estate-41-cross-site-scripting 2019-07-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/carspot/carspot-dealership-wordpress-classified-theme-243-unauthenticated-arbitrary-password-resetaccount-takeover 2025-02-17T20:04:38.000Z https://wordsec.net/vulnerabilities/themes/mamita/mamita-109-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/idyllic/idyllic-118-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/planty/planty-1140-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brook/brook-290-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prowess/prowess-23-authenticated-contributor-local-file-inclusion 2026-01-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-316-missing-authorization-in-several-ajax-actions 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-the7/the7-ultimate-wordpress-woocommerce-theme-1291-authenticated-contributor-stored-cross-site-scripting-via-the7_fancy_title_css 2025-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pj/pj-life-business-coaching-300-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/splash/splash-sport-club-wordpress-theme-for-basketball-football-hockey-443-authenticated-contributor-local-file-inclusion 2026-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chinchilla/chinchilla-116-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/miraculous/miraculous-209-unauthenticated-sql-injection 2025-09-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hello-elementor/hello-elementor-300-cross-site-request-forgery-to-notice-dismissal 2024-04-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mow/mow-410-cross-site-request-forgery 2025-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/viral-news/multiple-themes-various-versions-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-05-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sweetjane/sweet-jane-12-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5103-authenticated-subscriber-arbitrary-file-upload 2025-05-12T18:13:07.000Z https://wordsec.net/vulnerabilities/themes/hotel-galaxy/hotel-galaxy-4424-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aperitif/aperitif-16-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/innovio/innovio-multipurpose-landing-page-wordpress-theme-19-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7111-authenticatedauthor-arbitrary-file-upload-via-zip-extraction 2023-08-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/square/square-200-missing-authorization-via-activate_plugin 2023-04-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stratus/stratus-425-missing-authorization 2025-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realhomes/realhomes-437-missing-authorization 2023-07-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tediss/tediss-124-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandblog/grand-blog-31-cross-site-request-forgery 2026-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/travel-booking-wordpress-theme-3281-unauthenticated-php-object-injection 2026-03-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-752-unauthenticated-server-side-request-forgery 2025-04-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fiorello/fiorello-10-authenticated-subscriber-insecure-direct-object-reference 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fivestar/fivestar-17-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sevenstars/seven-stars-144-cross-site-request-forgery 2025-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stockholm/stockholm-9141-authenticated-contributor-local-file-inclusion 2025-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/deston/deston-10-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/activello/activello-144-reflected-cross-site-scripting 2022-11-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/striking-r/striking-234-reflected-cross-site-scripting 2024-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/uminex/uminex-109-unauthenticated-arbitrary-shortcode-execution 2026-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/verdure/verdure-16-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-301-unspecified-vulnerability 2014-10-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/taina/tain-024-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/great-lotus/great-lotus-buddhist-temple-wordpress-theme-rtl-131-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vivagh/vivagh-24-authenticated-subscriber-php-object-injection 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fitnesszone/fitness-zone-wordpress-57-unauthenticated-stored-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-1961-authenticated-editor-local-file-inclusion 2024-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/travel-booking-wordpress-theme-282-cross-site-scripting 2020-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listee/listee-116-unauthenticated-privilege-escalation 2026-02-26T17:48:51.000Z https://wordsec.net/vulnerabilities/themes/hueman/hueman-363-cross-site-request-forgery-bypass 2020-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/repagent/repagent-unknown-versions-cross-site-scripting 2013-12-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/news-flash/news-flash-110-authenticated-editor-php-object-injection 2024-08-07T13:00:55.000Z https://wordsec.net/vulnerabilities/themes/sapa/sapa-1114-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bricks/bricks-181-cross-site-request-forgery-via-save_settings 2024-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/uncode/uncode-2916-authenticated-subscriber-arbitrary-file-read-in-uncode_recordmedia 2025-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jupiterx/jupiterx-theme-300-authenticated-local-file-inclusion-via-print_pane 2023-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/churchope/churchope-21-local-file-inclusion 2014-12-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edge-decor/edge-decor-22-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lms/lms-92-reflected-cross-site-scripting 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-295-multiple-vulnerabilities 2020-01-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dwt-listing/dwt-directory-listing-wordpress-theme-333-reflected-cross-site-scripting 2025-01-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nexos/nexos-real-estate-wordpress-theme-18-cross-site-scripting 2020-06-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chaostheory/chaostheory-13-authenticated-subscriber-stored-cross-site-scripting 2024-05-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/olivia/olivia-095-reflected-cross-site-scripting 2024-12-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/restaurant-zone/restaurant-zone-078-authenticated-subscriber-arbitrary-file-upload 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/drone/drone-140-reflected-cross-site-scripting 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/whiterabbit/white-rabbit-152-unauthenticated-php-object-injection 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cookandmeal/cookmeal-123-unauthenticated-local-file-inclusion 2025-07-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edumall/edumall-445-unauthenticated-local-file-inclusion 2025-08-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vireo/vireo-1024-missing-authorization 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/immiex/sale-immigration-law-visa-services-support-migration-agent-consulting-158-authenticated-subscriber-privilege-escalation 2025-10-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/monyxi/monyxi-118-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/campress/campress-135-unauthenticated-local-file-inclusion 2025-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lella/lella-12-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/resurs/resurs-13-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grevo/grevo-24-unauthenticated-local-file-inclusion 2025-10-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/virtue/virtue-348-authenticated-contributor-stored-cross-site-scripting-via-post-author 2024-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zass/zass-woocommerce-theme-for-handmade-artists-and-artisans-39910-missing-authorization-to-authenticated-subscriber-demo-import 2025-03-04T21:11:01.000Z https://wordsec.net/vulnerabilities/themes/togo/togo-104-missing-authorization 2025-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/verbosa/verbosa-123-authenticated-contributor-stored-cross-site-scripting 2024-09-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-minimal/the-minimal-129-missing-authorization 2026-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lione/lione-116-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/alchemists/alchemists-460-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brikk/brikk-300-missing-authorization-to-authenticated-subscriber-arbitrary-content-deletion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kiddo/kiddo-theme-all-versions-arbitrary-file-upload 2014-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yuki/yuki-1313-missing-authorization-to-authenticated-subscriber-theme-setting-reset 2024-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/opstore/opstore-145-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-832-authenticated-contributor-stored-cross-site-scripting 2025-10-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/agrofood/agrofood-140-reflected-cross-site-scripting 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ofiz/ofiz-wordpress-business-consulting-theme-20-reflected-cross-site-scripting 2025-07-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/constructor/constructor-165-missing-authorization-to-authenticated-subscriber-theme-clean 2025-10-02T21:28:04.000Z https://wordsec.net/vulnerabilities/themes/SCv1/scv1-theme-all-known-versions-arbitrary-file-download 2014-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/customizr/customizr-430-cross-site-request-forgery-bypass 2020-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/roseta/roseta-130-authenticated-contributor-stored-cross-site-scripting 2024-09-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-318-unauthenticated-local-file-inclusion-via-hotel_alone_load_more_post 2025-03-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cozystay/cozystay-171-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kayon/kayon-13-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/search-and-go/search-go-directory-wordpress-theme-27-authentication-bypass-to-privilege-escalation-via-account-takeover 2025-10-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neosense/neosense-multipurpose-wordpress-theme-wordpress-18-arbitrary-file-upload 2016-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prisma/prisma-110-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/leroux/leroux-business-consulting-wordpress-theme-14-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blessing/blessing-premium-responsive-wordpress-theme-1321-sensitive-information-disclosure 2015-05-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/solene/solene-34-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/modular/modular-24-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lobo/lobo-286-authenticated-subscriber-sql-injection 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colibri-wp/colibri-wp-1094-cross-site-request-forgery-to-limited-plugin-installation 2024-02-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ochahouse/ochahouse-228-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-classified-ads-wordpress-theme-517-missing-authorization-to-authenticated-subscriber-arbitrary-postattachment-deletion 2025-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sevenhills/sevenhills-162-unauthenticated-php-object-injection 2026-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/atlas/atlas-210-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/javo-spot/javo-spot-300-directory-traversal 2017-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/responsive/responsive-502-missing-authorization-to-html-injection 2024-03-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/delicate/delicate-355-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-09-12T21:31:41.000Z https://wordsec.net/vulnerabilities/themes/dor/dr-24-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/musico/musico-345-reflected-cross-site-scripting 2026-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-wordpress-70-cross-site-request-forgery 2025-04-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-282-authenticated-contributor-stored-cross-site-scripting 2025-10-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-404-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2046-authenticated-contributor-stored-cross-site-scripting 2024-05-20T14:17:20.000Z https://wordsec.net/vulnerabilities/themes/wisemove/multiple-themes-by-axiomthemes-themerex-and-ancorathemes-1180-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/smilepure/smilepure-185-unauthenticated-local-file-inclusion 2025-07-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/consus/extend-themes-multiple-versions-cross-site-request-forgery 2024-05-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sala/sala-113-reflected-cross-site-scripting 2025-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shoppette/easy-digital-downloads-shoppette-theme-105-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-823-unauthenticated-arbitrary-shortcode-execution 2025-07-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xstore/xstore-961-reflected-cross-site-scripting 2025-09-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/edifice/edifice-18-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/popularfx/popularfx-124-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unlimhost/unlimhost-123-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/algenix/algenix-10-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/folo/folo-unknown-versions-cross-site-scripting 2013-11-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/enfold/enfold-responsive-multi-purpose-theme-714-reflected-cross-site-scripting 2026-06-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grillandchow/grill-and-chow-16-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-20145-reflected-cross-site-scripting 2019-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nelson/nelson-120-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/greenorganic/greenorganic-245-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/andersonclinic/anderson-142-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/disconnected/disconnected-130-reflected-cross-site-scripting 2024-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jannah/jannah-760-unauthenticated-stored-cross-site-scripting 2025-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4210-authenticated-contributor-local-file-inclusion 2025-07-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snsnitan/nitan-29-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tantum/tantum-1113-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/calafate/calafate-177-authenticated-contributor-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newscard/newscard-13-unauthenticated-local-file-inclusion 2024-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-480-unauthenticated-sensitive-information-disclosure 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/newsmag/newsmag-244-reflected-cross-site-scripting 2023-03-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nanosoft/nanosoft-132-missing-authorization 2026-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lindo/lindo-125-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/otaku/otaku-180-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mTheme-Unus/mtheme-unus-23-directory-traversal-to-unauthenticated-arbitrary-file-read 2015-09-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/manufaktursolutions/manufaktur-solutions-111-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cordobo-green-park/cordobo-green-park-all-versions-cross-site-scripting 2007-06-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rally/rally-11-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ask-me/ask-me-681-reflected-cross-site-scripting 2022-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yuki/yuki-1314-cross-site-request-forgery-to-theme-setting-reset 2024-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mahogany/mahogany-29-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ms-lms-starter-theme/masterstudy-lms-starter-118-unauthenticated-sensitive-information-exposure 2024-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cream-magazine/cream-magazine-2110-missing-authorization 2026-01-11T22:25:40.000Z https://wordsec.net/vulnerabilities/themes/multipurpose/multipurpose-120-authenticated-contributor-php-object-injection 2024-08-07T13:13:10.000Z https://wordsec.net/vulnerabilities/themes/puca/puca-2633-unauthenticated-local-file-inclusion 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/beauty-premium/beauty-clean-108-cross-site-request-forgery-arbitrary-file-upload 2016-03-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/travel-booking/multiple-themes-various-versions-reflected-cross-site-scripting 2022-02-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/werkstatt/werkstatt-creative-portfolio-wordpress-theme-483-authenticated-contributor-php-object-injection 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/au-pair-agency/au-pair-agency-babysitting-nanny-theme-122-unauthenticated-php-object-injection 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/houzez/houzez-416-unauthenticated-stored-cross-site-scripting-via-svg-file-upload 2025-11-26T00:01:12.000Z https://wordsec.net/vulnerabilities/themes/barter/barter-16-authenticated-contributor-stored-cross-site-scripting 2024-12-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/metamax/metamax-114-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/turitor/turitor-153-authenticated-contributor-local-file-inclusion 2025-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nioland/nioland-126-reflected-cross-site-scripting-via-s 2024-10-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/envo-multipurpose/envo-multipurpose-116-missing-authorization 2025-01-14T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/event/theme-122-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/labtechco/labtechco-83-authenticated-contributor-local-file-inclusion 2026-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-1961-unauthenticated-local-file-inclusion 2024-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ricky/ricky-231-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aqua/aqua-512-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/aviana/aviana-21-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/electrician/electrician-electrical-service-wordpress-10-reflected-cross-site-scripting 2025-07-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/extremestore/extreme-store-157-unauthenticated-php-object-injection 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/invico/invico-wordpress-consulting-business-theme-19-reflected-cross-site-scripting 2025-07-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/modular/modular-24-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/awake/awake-33-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/industrial/industrial-178-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2025-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/photography/photography-776-missing-authorization 2026-07-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nexter/nexter-203-missing-authorization 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/prowess/prowess-fitness-and-gym-wordpress-theme-181-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/altair/altair-524-unauthenticated-arbitrary-options-update-via-pp_import_current 2025-03-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blue-memories/blue-memories-15-cross-site-scripting 2007-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/real-spaces/real-spaces-wordpress-properties-directory-theme-36-unauthenticated-privilege-escalation-to-administrator-via-imic_agent_register 2025-08-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jude/jude-130-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/graphene/graphene-292-missing-authorization 2024-03-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/stargaze/stargaze-15-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/activello/activello-144-authenticated-subscriber-stored-cross-site-scripting 2022-11-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pin-wp/pin-wp-72-authenticated-subscriber-arbitrary-file-upload 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/civi/civi-job-board-freelance-marketplace-wordpress-theme-214-sensitive-information-exposure 2025-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/struktur/struktur-251-authenticated-subscriber-insecure-direct-object-reference 2025-12-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/felizia/felizia-fertility-center-medical-wordpress-theme-134-unauthenticated-local-file-inclusion 2026-03-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2039-authenticated-contributor-stored-cross-site-scripting-via-about-me-block 2024-04-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sociallyviral/sociallyviral-1010-cross-site-request-forgery 2024-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-359-unauthenticated-stored-cross-site-scripting 2026-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/urna/urna-2512-unauthenticated-local-file-inclusion 2026-02-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/veil/veil-wedding-photographer-wordpress-theme-19-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingo/listingo-business-listing-and-directory-wordpress-theme-327-unauthenticated-arbitrary-shortcode-execution 2025-03-04T21:11:23.000Z https://wordsec.net/vulnerabilities/themes/daisho/daisho-theme-42-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/geya/geya-renewable-energy-ecology-wordpress-theme-115-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ecogrow/ecogrow-17-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gameplan/gameplan-1510-reflected-cross-site-scripting 2024-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/customizr/customizr-4421-cross-site-request-forgery-to-notice-dismissal 2024-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-306-reflected-cross-site-scripting 2020-08-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/krowd/krowd-150-unauthenticated-local-file-inclusion 2025-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/anona/anona-80-authenticated-subscriber-php-object-injection 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brilliance/brilliance-131-reflected-cross-site-scripting 2023-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cocco/cocco-kids-store-and-baby-shop-wordpress-theme-20-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-175-missing-authorization 2026-02-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/searchgo/search-go-28-authenticated-subscriber-privilege-escalation 2026-03-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dzonia-lite/multiple-plugins-and-themes-by-inkthemes-118-unauthenticated-information-exposure 2025-09-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kids-gift-shop/kids-gift-shop-054-authenticated-subscriber-arbitrary-file-upload 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chocolate-house/chocolate-house-115-missing-authorization 2026-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/covertvideopress/covert-videopress-all-known-versions-cross-site-scripting 2013-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/catwalk/catwalk-14-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medeus/medeus-114-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yungen/yungen-1012-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-directory-listing-travel-wordpress-theme-1610-missing-authorization-to-privilege-escalation-via-unauthenticated-arbitrary-user-password-change 2025-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/medibazar/multiple-themes-by-klbtheme-various-versions-cross-site-request-forgery 2023-12-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/unitravel/unitravel-142-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobzilla/jobzilla-job-board-wordpress-theme-20-cross-site-request-forgery 2025-08-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xsmart/xsmart-1294-authenticated-subscriber-privilege-escalation 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/avante/avante-305-reflected-cross-site-scripting 2026-05-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2019-authenticated-editor-stored-cross-site-scripting 2024-02-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/printy/printy-18-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/golo/golo-170-authentication-bypass-to-account-takeover 2025-06-02T16:21:57.000Z https://wordsec.net/vulnerabilities/themes/deep-blue/deep-blue-192-arbitrary-file-upload 2018-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bookory/bookory-227-authenticated-contributor-local-file-inclusion 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eros/eros-13-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/heartstar/heartstar-1014-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/curvo/curvo-theme-all-known-versions-cross-site-request-forgery-and-arbitrary-file-upload 2013-10-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kidslife/kids-life-children-school-wordpress-52-unauthenticated-stored-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fluer/fleur-20-authenticated-subscriber-insecure-direct-object-reference 2026-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adifier-system/adifier-system-314-unauthenticated-local-file-inclusion 2023-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/organic-beauty/organic-beauty-146-unauthenticated-php-object-injection 2025-08-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/eptonic/eptonic-14-arbitrary-file-upload 2013-01-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-867-authenticated-contributor-stored-cross-site-scripting-via-pcsml_smartlists_h 2025-08-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chroma/chroma-111-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wplms/wplms-1995-unauthenticated-arbitrary-directory-deletion 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blaze/blaze-theme-all-versions-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-70-cross-site-request-forgery-and-missing-authorization 2021-09-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/morning-records/morning-records-music-sound-studio-wordpress-theme-12-unauthenticated-php-object-injection 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/diza/diza-1315-authenticated-contributor-local-file-inclusion 2025-12-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ignition/multiple-thrive-themes-200-arbitrary-file-upload 2021-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/snowy/snowy-113-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colormag/colormag-312-missing-authorization-to-arbitrary-plugin-installation 2024-01-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nutrie/nutrie-201-authenticated-subscriber-arbitrary-file-upload 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/injob/injob-multi-features-for-recruitment-wordpress-theme-338-cross-site-scripting 2019-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-741-stored-cross-site-scripting 2021-09-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vayvo-progression/vayvo-68-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/onepress/onepress-2314-missing-authorization 2025-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/specialist/specialist-unspecified-version-cross-site-request-forgery-to-arbitrary-file-upload 2014-03-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/musicplace/sound-musical-instruments-online-store-169-unauthenticated-php-object-injection 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/quanzo/quanzo-creative-portfolio-template-kit-1010-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/elemin/elemin-143-arbitrary-file-upload 2013-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/esme/esme-14-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandconference/grand-conference-52-unauthenticated-php-object-injection 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dailydeal/daily-deal-unknown-versions-arbitrary-file-upload 2013-10-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/barberry/barberry-29987-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lote27/lote27-all-versions-arbitrary-file-download 2014-01-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woffice/woffice-crm-401-authorization-bypass 2021-08-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bassein/bassein-1015-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/militarology/militarology-1015-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/BuilderChild-Market/market-5127-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-352-unauthenticated-privilege-escalation 2025-04-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gioia/gioia-14-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jarvis/jarvis-night-club-concert-festival-wordpress-1811-unauthenticated-php-object-injection 2025-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-2910-missing-authorization 2025-09-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/digital-newspaper/digital-newspaper-115-cross-site-request-forgery-to-notice-dismissal 2024-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/easymeals/easymeals-151-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-food-corner/vw-food-corner-110-missing-authorization 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/brisk/brisk-unknown-versions-cross-site-scripting 2012-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mediciti-lite/mediciti-lite-130-reflected-cross-site-scripting 2023-03-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/police-department/police-department-217-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mixtape/mixtape-21-unauthenticated-local-file-inclusion 2026-03-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fixteam/fixteam-electronics-mobile-devices-repair-wordpress-theme-14-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/homey/homey-245-unauthenticated-sql-injection 2025-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/point/point-11-cross-site-request-forgery 2024-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colorway/colorway-423-cross-site-request-forgery 2023-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fermentio/fermentio-brewery-and-winemaking-restaurant-wordpress-theme-150-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lingvico/lingvico-1014-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zorka/zorka-157-missing-authorization 2026-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wanderland/wanderland-171-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/themify-ultra/themify-ultra-735-authenticated-subscriber-arbitrary-file-upload 2023-10-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/yokoo/yokoo-1111-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/trending/trending-02-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandspa/grand-spa-355-reflected-cross-site-scripting 2026-01-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/astra/astra-468-authenticated-contributor-stored-cross-site-scripting-via-display-name 2024-03-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/intrace/multiple-themes-by-jegstudio-various-versions-missing-authorization-to-notice-dismissal 2024-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/colorway/colorway-341-cross-site-scripting 2016-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vizeon/vizeon-business-consulting-121-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/cardealer/car-dealer-automotive-wordpress-theme-responsive-163-authenticated-subscriber-arbitrary-file-deletion-and-read 2025-02-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-825-missing-authorization 2022-11-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/humanum/humanum-114-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/digitally/digitally-108-reflected-cross-site-scripting 2024-10-15T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gracioza/gracioza-1015-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/overworld/overworld-esports-and-gaming-wordpress-theme-15-authenticated-contributor-local-file-inclusion 2026-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/click-mag/click-mag-viral-wordpress-news-magazineblog-theme-360-missing-authorization-to-authenticated-subscriber-arbitrary-options-deletion 2025-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/accelerate/accelerate-153-missing-authorization-to-authenticated-subscriber-themegrill-demo-importer-plugin-installation 2026-08-05T22:18:51.000Z https://wordsec.net/vulnerabilities/themes/tails/tails-1412-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/playful/playful-1190-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/classter/classter-25-unauthenticated-php-object-injection 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-job-board-wordpress-theme-390-reflected-cross-site-scripting 2020-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/luxedrive/luxedrive-10-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/NativeChurch/nativechurch-4882-reflected-cross-site-scripting 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/clockstone/clockstone-12-arbitrary-file-upload 2012-12-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tiki-time/tiki-time-13-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/williamson/mwilliamson-1211-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/solaris/solaris-25-unauthenticated-php-object-injection 2026-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-781-cross-site-request-forgery 2022-09-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/atomlab/atomlab-245-unauthenticated-local-file-inclusion 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/outdoor/outdoor-396-reflected-cross-site-scripting 2023-04-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/construction-landing-page/construction-landing-page-141-missing-authorization 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chankhe/chankhe-105-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-activation 2023-03-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dixon/dixon-1421-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/appius/appius-theme-10-arbitrary-file-upload 2014-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/whitish-lite/whitish-lite-2113-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ona/ona-124-authenticated-subscriber-arbitrary-file-upload 2026-03-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/motors/motors-car-dealer-rental-listing-wordpress-theme-5680-missing-authorization 2026-06-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/altair/altair-522-unauthenticated-php-object-injection 2025-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wpjobster/wpjobster-635-reflected-cross-site-scripting 2026-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dentario/dentario-15-unauthenticated-php-object-injection 2026-02-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kbase/knowledge-base-29-authenticated-subscriber-php-object-injection 2025-09-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hyori/hyori-136-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/videopro/videopro-2381-unauthenticated-local-file-inclusion 2026-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wastia/wastia-113-unauthenticated-arbitrary-file-upload 2025-09-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/patiotime/patiotime-21-unauthenticated-php-object-injection 2026-02-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/appius/appius-theme-10-full-path-disclosure 2012-12-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/butcher/butcher-240-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ireca/ireca-185-unauthenticated-local-file-inclusion 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vintwood/vintwood-118-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-chocolate/chocolate-wp-responsive-photography-theme-all-versions-remote-file-inclusion 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fushion-theme/fusion-21-arbitrary-file-download 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/echelon/echelon-24-arbitrary-file-deletion 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mocho-blog/mocho-blog-104-cross-site-scripting 2023-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/deepdigital/deepdigital-102-unauthenticated-arbitrary-shortcode-execution 2026-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sahifa/sahifa-240-full-path-disclosure 2013-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/progress/progress-12-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/emallshop/emallshop-2421-unauthenticated-php-object-injection 2026-04-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/gunslinger/gunslinger-17-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/konzept/konzept-unkown-versions-arbitrary-file-upload 2014-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/genemy/genemy-creative-minimal-landing-page-builder-for-digital-startup-design-studio-agency-in-marketing-166-authenticated-subscriber-privilege-escalation 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kapee/kapee-171-unauthenticated-stored-cross-site-scripting 2026-04-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bridge/bridge-theme-182-qode-instagram-widget-201-qode-twitter-feed-200-open-redirect 2019-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sala/sala-113-authenticated-subscriber-php-object-injection 2025-06-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/attire/attire-206-authenticated-contributor-php-object-injection 2024-08-30T14:33:13.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5103-missing-authorization-to-authenticated-subscriber-arbitrary-theme-options-update 2025-05-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/techone/techone-303-unauthenticated-arbitrary-shortcode-execution 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/magnitudo/magnitudo-all-versions-arbitrary-file-upload 2013-11-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/xenon/xenon-bootstrap-admin-theme-with-angularjs-13-reflected-cross-site-scripting 2020-03-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/togo/togo-104-authenticated-subscriber-privilege-escalation 2025-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/montezuma/montezuma-118-cross-site-scripting 2013-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/industrial-lite/industrial-lite-108-missing-authorization 2025-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adforest/adforest-516-authentication-bypass 2024-12-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/triple-seven/777-1130-unauthenticated-php-object-injection 2026-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-19991-authenticated-contributor-stored-cross-site-scripting 2025-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/isida/isida-142-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/buyent/buyent-theme-with-buyent-classified-plugin-107-unauthenticated-privilege-escalation-via-user-registration 2026-02-18T15:39:26.000Z https://wordsec.net/vulnerabilities/themes/butcher/butcher-254-reflected-cross-site-scripting 2025-05-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/discy/discy-51-cross-site-request-forgery-to-settings-reset 2022-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/oxygen/oxygen-608-unauthenticated-server-side-request-forgery 2026-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/makeaholic/makeaholic-185-missing-authorization 2025-08-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bodycenter/bodycenter-gym-fitness-woocommerce-wordpress-theme-24-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ecoblue/ecoblue-115-unauthenticated-local-file-inclusion 2026-01-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/acerola/mulitple-themes-by-themeton-various-versions-unauthenticated-php-object-injection 2025-05-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/raindrops/raindrops-1600-authenticated-contributor-stored-cross-site-scripting 2024-05-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/spin/spin-cricket-team-sports-wordpress-theme-ai-18-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/helvig/helvig-10-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem-elementor/thegem-elementor-5105-missing-authorization 2025-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/teluro/teluro-1031-cross-site-request-forgery 2024-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bighearts/bighearts-3114-missing-authorization 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fitness-fse/fitness-fse-106-missing-authorization 2026-01-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/miion/miion-127-authenticated-subscriber-local-file-inclusion 2026-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/redy/redy-102-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/bw-printxtore/printxtore-177-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-26514-authenticated-subscriber-php-object-injection 2022-11-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/zoxpress/zoxpress-the-all-in-one-wordpress-news-theme-2120-missing-authorization-to-authenticated-subscriber-arbitrary-options-deletion 2025-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hostiko/hostiko-hosting-wordpress-whmcs-theme-301-unauthenticated-local-file-inclusion 2025-02-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/togo/togo-104-authenticated-subscriber-php-object-injection 2025-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/neighborly/neighborly-14-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-09-12T21:29:52.000Z https://wordsec.net/vulnerabilities/themes/mr-murphy/mr-murphy-custom-dress-tailoring-clothing-wordpress-theme-12121-unauthenticated-php-object-injection 2025-06-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/askka/askka-candle-shop-wordpress-theme-131-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandmagazine/grand-magazine-355-cross-site-request-forgery 2026-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/scarlet/scarlet-all-versions-cross-site-scripting 2013-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tweaker5/tweaker5-12-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-09-12T21:30:43.000Z https://wordsec.net/vulnerabilities/themes/onepagewebsite/onepagewebsite-unknown-versions-full-path-disclosure 2012-12-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/samex/samex-clean-minimal-shop-woocommerce-wordpress-theme-26-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wizors-investments/wizors-212-unauthenticated-local-file-inclusion 2026-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandtour/grand-tour-562-unauthenticated-stored-cross-site-scripting 2026-01-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/moveme/moveme-1215-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-71110-missing-authorization 2025-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/business-one-page/business-one-page-129-missing-authorization-to-notice-dismissal 2024-07-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-checks-to-private-pagepost-data-disclosure 2022-11-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nrgfashion/the-fashion-model-agency-one-page-beauty-theme-144-unauthenticated-php-object-injection 2025-05-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-841-reflected-cross-site-scripting 2023-12-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/offset-writing/offset-writing-12-reflected-cross-site-scripting 2025-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/sweet-dessert/sweet-dessert-1113-unauthenticated-php-object-injection 2025-06-03T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/parallelus-intersect/parallelus-unite-interscet-traject-salutation-20-reflected-cross-site-scripting 2012-10-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/onleash/onleash-152-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/mymedi/mymedi-177-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/ecommerce-zone/ecommerce-zone-097-authenticated-subscriber-arbitrary-file-upload 2026-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/nika/nika-1214-authenticated-contributor-local-file-inclusion 2025-12-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/soledad/soledad-845-cross-site-request-forgery 2024-04-09T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/petsworld/pet-world-28-authenticated-subscriber-php-object-injection 2025-05-21T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/estrutura-basica/estrutura-basica-all-known-versions-path-traversal 2015-09-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-721-authenticated-subscriber-stored-cross-site-scripting 2023-05-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/chic-lite/chic-lite-113-cross-site-request-forgery-to-notice-dismissal 2024-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himer/himer-210-authenticated-contributor-stored-cross-site-scripting 2024-06-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/hot-coffee/hot-coffee-17-unauthenticated-php-object-injection 2026-05-26T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/betheme/betheme-2816-authenticated-contributor-stored-cross-site-scripting-via-page_title 2025-10-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/workup/workup-job-board-wordpress-theme-215-reflected-cross-site-scripting 2020-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/fivestar/fivestar-17-authenticated-subscriber-insecure-direct-object-reference 2025-12-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/woffice/woffice-548-reflected-cross-site-scripting 2024-07-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/the-erudite/the-erudite-278-cross-site-scripting 2011-09-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/wpzoom-inspiro-pro/inspiro-pro-722-authenticated-contributor-stored-cross-site-scripting 2022-07-18T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/antisnews/antisnews-109-cross-site-scripting 2011-09-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/himer/himer-210-cross-site-request-forgery-to-private-group-join 2024-06-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jaroti/jaroti-148-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/lorem-ipsum-books-media-store/lorem-ipsum-books-media-store-126-unauthenticated-php-object-injection 2026-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dailyedition/daily-edition-162-arbitrary-file-upload 2015-03-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/storebiz/storebiz-1032-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/kunco/kunco-145-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/atahualpa/atahualpa-3724-cross-site-scripting-via-cross-site-request-forgery 2017-03-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/raise-mag/wishful-blog-201-raise-mag-107-unauthenticated-cross-site-scripting 2023-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vw-school-education/vw-school-education-146-missing-authorization 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/vantage/vantage-12032-authenticated-contributor-stored-cross-site-scripting-via-gallery-block-text-content 2026-04-15T14:58:27.000Z https://wordsec.net/vulnerabilities/themes/tm-moody/moody-273-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shoutbox/shoutbox-unknown-versions-cross-site-scripting 2012-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/adifier-system/adifier-system-317-unauthenticated-arbitrary-password-reset 2025-01-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/construction-light/construction-light-167-missing-authorization 2025-10-16T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/thegem/thegem-5811-authenticated-subscriber-stored-cross-site-scripting 2023-05-05T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/manoir/manoir-111-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-328-authenticated-contributor-sql-injection 2026-01-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/search-and-go/search-go-28-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/catamaran/catamaran-115-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/beacon/beacon-224-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2141-authenticated-contributor-php-object-injection-via-deserialization-of-untrusted-data-via-blocksy_meta-rest-api-field 2026-06-08T20:11:29.000Z https://wordsec.net/vulnerabilities/themes/streamit/streamit-401-authenticated-subscriber-arbitrary-file-download 2025-04-04T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/scoreme/scoreme-2016-04-01-cross-site-scripting 2016-04-01T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blogger-buzz/blogger-buzz-126-authenticated-contributor-stored-cross-site-scripting 2025-07-30T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2026-authenticated-contributor-stored-cross-site-scripting 2024-03-08T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/education-zone/education-zone-138-missing-authorization 2026-03-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/petermason/peter-mason-145-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/happy-baby/happy-baby-1212-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/navian/navian-154-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/dt-chocolate/dt-chocolate-all-versions-cross-site-scripting 2014-01-13T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/news-magazine-x/news-magazine-x-1250-missing-authorization 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/basel/basel-591-missing-authorization 2025-11-19T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/traveler/traveler-316-unauthenticated-sql-injection-via-order_id 2024-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/marveland/marveland-130-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/jobeleon-wpjobboard/jobeleon-theme-191-reflected-cross-site-scripting 2024-03-28T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/tribe/tribe-173-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/metro/metro-213-reflected-cross-site-scripting 2026-02-24T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/grandmagazine/grand-magazine-357-reflected-cross-site-scripting 2026-01-22T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/Avada/avada-7116-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/pendulum/pendulum-315-authenticated-subscriber-php-object-injection 2026-03-20T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/shift-cv/shiftcv-blog-resume-portfolio-wordpress-theme-3014-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/massive-dynamic/massive-dynamic-82-unauthenticated-local-file-inclusion 2025-02-23T00:00:00.000Z https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3200-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-09-04T14:54:24.000Z https://wordsec.net/vulnerabilities/themes/konzept/konzept-fullscreen-portfolio-wordpress-theme-24-reflected-cross-site-scripting 2020-07-30T00:00:00.000Z