| Ark Theme Core |
Unauthenticated Remote Code Execution (RCE) |
| Avada Theme |
Unauthenticated Shortcode Execution (BAC) |
| BoomBox Theme Extensions |
Local File Inclusion (LFi) from Shortcode |
| Bricks Builder Theme |
Privilege Escalation (BAC) from create_autosave |
| Campress Theme |
Unauthenticated Local File Inclusion (LFi) |
| Car Dealer Theme |
File Deletion (BAC) and Read (BAC) |
| Car Dealer Theme |
Cross-Site Request Forgery (CSRF) to User Update from update_user_profile |
| Car Dealer Theme |
Missing Authorization (BAC) to Change (BAC) and JS-CSS Files Delete (BAC) |
| Car Dealer Theme |
Theme Option Update to Privilege Escalation (BAC) |
| CarSpot Theme |
Unauthenticated Password Reset/Account Takeover (BAC) |
| Child Themes Helper |
Cross-Site Request Forgery (CSRF) to File Deletion (BAC) |
| Click Mag Theme |
Missing Authorization (BAC) to Options Deletion (BAC) |
| DWT - Directory & Listing Theme |
Cross-Site Scripting (XSS) from Shortcode |
| Enfold Theme |
Missing Authorization (BAC) to Private Information Disclosure in avia-export-classphp |
| Enfold Theme |
Server-Side Request Forgery (SSRF) from attachment_id |
| Hostiko Theme |
Cross-Site Scripting (XSS) |
| Hostiko Theme |
Local File Inclusion (LFi) |
| WordPress Listivo - Classified Ads WordPress Theme |
Cross-Site Scripting (XSS) |
| MediCenter - Health Medical Clinic WordPress Theme |
Private Data Exposure |
| OnePress Theme |
Broken Access Control (BAC) |
| Orbit Fox by ThemeIsle |
Cross-Site Scripting (XSS) |
| Pearl - Corporate Business Theme |
Local File Inclusion (LFi) |
| PressMart Theme |
Unauthenticated Shortcode Execution (BAC) |
| Puzzles Theme |
Cross-Site Scripting (XSS) from Shortcode |
| Puzzles Theme |
Missing Authorization (BAC) to Cross-Site Scripting (XSS) |
| Puzzles Theme |
Unauthenticated PHP Object Injection |
| Real Estate 7 Theme |
Unauthenticated Privilege Escalation (BAC) to Administrator |
| SocialV Theme |
Missing Authorization (BAC) to File Download (BAC) |
| Traveler Theme |
Local File Inclusion (LFi) from Shortcode |
| Uncode Theme |
Cross-Site Scripting (XSS) from mle-description |
| Uncode Theme |
File Read (BAC) in uncode_recordMedia |
| Uncode Theme |
Unauthenticated File Read (BAC) in uncode_admin_get_oembed |
| Zox News Theme |
Missing Authorization (BAC) to Options Modification |
| ZoxPress Theme |
Missing Authorization (BAC) to Options Deletion (BAC) |
| ZoxPress Theme |
Missing Authorization (BAC) to Options Update (BAC) |
