WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Son Bach & Lan Vy HPT Vietnam in WordPress Theme Aora versions = 1.3.19...

WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Flatastic versions = 2.0...

WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Capella versions = 2.5.5...

WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Capella versions = 2.5.5...

WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Homlisti versions = 3.1.2...

PT-2026-78976

Name of the Vulnerable Software and Affected Versions Flatastic versions prior to 2.1 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the unserialize function, allowing an attacker to manipulate serialized objects and...

PT-2026-81178

Name of the Vulnerable Software and Affected Versions Mane theme for WordPress versions prior to 1.8 Description The Mane theme for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, which can lead to the...

PT-2026-78970

Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...

WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Shuffle versions = 1.8...

WordPress Spectra theme <= 2.6.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Spectra versions = 2.6.1...

CVE-2026-73387

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

EUVD-2026-62388

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

WordPress MedXtore – Responsive Multipurpose Elementor WooCommerce WordPress Theme theme <= 3.3.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme MedXtore – Responsive Multipurpose Elementor WooCommerce WordPress Theme versions = 3.3.4...

WordPress DSK theme <= 2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme DSK versions = 2.1...

WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme <= 2.7 - Local File Inclusion vulnerability

WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme = 2.7 - Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme versions = 2.7...

WordPress Valen - Sport, Fashion WooCommerce WordPress Theme theme <= 2.4 - Cross Site Scripting (XSS) vulnerability

WordPress Valen - Sport, Fashion WooCommerce WordPress Theme theme = 2.4 - Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Valen - Sport, Fashion WooCommerce WordPress Theme versions = 2.4...

WordPress MBStore - Digital WooCommerce WordPress Theme theme <= 2.3 - Cross Site Scripting (XSS) vulnerability

WordPress MBStore - Digital WooCommerce WordPress Theme theme = 2.3 - Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme MBStore - Digital WooCommerce WordPress Theme versions = 2.3...

WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme theme <= 2.3 - Cross Site Scripting (XSS) vulnerability

WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme theme = 2.3 - Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme BodyCenter - Gym, Fitness WooCommerce WordPress Theme versions = 2.3...

WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Theme Koji versions = 2.2.1...

WordPress Chaplin theme <= 2.6.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Theme Chaplin versions = 2.6.8...