Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-07-15
CVE-2025-1313 - Nokri Job Board Wordpress Theme
The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.3. This is due to the plugin not properly validating a user's identity prior to updating their details like email address. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
THEME
Nokri Job Board Wordpress Theme
CVE-2025-1313
Risk Score
Threat Entry
Updated 2025-07-10
CVE-2025-4606 - Saas Wordpress Theme
The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
THEME
Saas Wordpress Theme
CVE-2025-4606
Risk Score
Threat Entry
Updated 2025-07-09
CVE-2025-6744 - The Woodmart Theme
The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.2.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode through the woodmart_get_products_shortcode() function. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
THEME
The Woodmart
CVE-2025-6744
Risk Score
Threat Entry
Updated 2025-07-09
CVE-2025-6743 - Woodmart Theme
The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_markers' attribute in all versions up to, and including, 8.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
THEME
Woodmart
CVE-2025-6743
Risk Score
Threat Entry
Updated 2025-07-08
CVE-2025-52807 - Allows Php Local File Inclusion Theme
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Kossy - Minimalist eCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Kossy - Minimalist eCommerce WordPress Theme: from n/a through 1.45.
THEME
Allows Php Local File Inclusion
CVE-2025-52807
Risk Score
Threat Entry
Updated 2025-07-08
CVE-2025-32311 - Allows Reflected Xss Theme
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Pressroom - News Magazine WordPress Theme allows Reflected XSS. This issue affects Pressroom - News Magazine WordPress Theme: from n/a through 6.9.
THEME
Allows Reflected Xss
CVE-2025-32311
Risk Score
Threat Entry
Updated 2025-07-03
CVE-2024-5647 - Changeset Theme
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was fixed in the upstream library (Magnific Popups version 1.2.0) by disabling the loading of HTML within certain fields by default.
THEME
Changeset
CVE-2024-5647
Risk Score
Threat Entry
Updated 2025-07-03
CVE-2025-4946 - Vikinger Theme
The Vikinger theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the vikinger_delete_activity_media_ajax() function in all versions up to, and including, 1.9.32. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Note: Requires Vikinger Media plugin to be installed and active.
THEME
Vikinger
CVE-2025-4946
Risk Score
Threat Entry
Updated 2025-07-03
CVE-2024-13786 - Education Theme
The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the 'themerex_callback_view_more_posts' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may…
THEME
Education
CVE-2024-13786
Risk Score
Threat Entry
Updated 2025-07-03
CVE-2025-5014 - Real Estate Wordpress Theme
The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wp_rem_cs_widget_file_delete' function in all versions up to, and including, 2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
THEME
Real Estate Wordpress Theme
CVE-2025-5014
Risk Score
Threat Entry
Updated 2025-07-03
CVE-2025-6934 - Used By The Fullhouse Real Estate Responsive Theme
The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. This is due to a lack of role restriction during registration in the 'on_regiser_user' function. This makes it possible for unauthenticated attackers to arbitrarily choose the role, including the Administrator role, assigned when registering.
THEME
Used By The Fullhouse Real Estate Responsive
CVE-2025-6934
Risk Score
Threat Entry
Updated 2025-06-30
CVE-2025-52811 - Allows Php Local File Inclusion Theme
Path Traversal vulnerability in Creanncy Davenport - Versatile Blog and Magazine WordPress Theme allows PHP Local File Inclusion. This issue affects Davenport - Versatile Blog and Magazine WordPress Theme: from n/a through 1.3.
THEME
Allows Php Local File Inclusion
CVE-2025-52811
Risk Score
Threat Entry
Updated 2025-06-30
CVE-2025-28947 - Allows Php Local File Inclusion Theme
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme MBStore - Digital WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects MBStore - Digital WooCommerce WordPress Theme: from n/a through 2.3.
THEME
Allows Php Local File Inclusion
CVE-2025-28947
Risk Score
Threat Entry
Updated 2025-06-30
CVE-2023-25998 - Allows Php Local File Inclusion Theme
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through 2.6.
THEME
Allows Php Local File Inclusion
CVE-2023-25998
Risk Score
Threat Entry
Updated 2025-06-30
CVE-2024-12827 - Listing Wordpress Theme
The DWT - Directory & Listing WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3.6. This is due to the plugin not properly checking for an empty token value prior to resetting a user's password through the dwt_listing_reset_password() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
THEME
Listing Wordpress Theme
CVE-2024-12827
Risk Score
Threat Entry
Updated 2025-06-23
CVE-2025-5524 - Oceanwp Theme
The OceanWP theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Select HTML tag in all versions up to, and including, 4.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
THEME
Oceanwp
CVE-2025-5524
Risk Score
Threat Entry
Updated 2025-06-16
CVE-2025-4200 - Accessories Woocommerce Wordpress Theme
The Zagg - Electronics & Accessories WooCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.1 via the load_view() function that is called via at least three AJAX actions: 'load_more_post', 'load_shop', and 'load_more_product. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other…
THEME
Accessories Woocommerce Wordpress Theme
CVE-2025-4200
Risk Score
Threat Entry
Updated 2025-07-10
CVE-2025-4973 - Used By The Workreap Freelance Marketplace Theme
The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1. This is due to the plugin not properly verifying a user's identity prior to logging them in when verifying an account with an email address. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they know user's email address. This is only exploitable fi the user's confirmation_key has not already been set by the plugin.
THEME
Used By The Workreap Freelance Marketplace
CVE-2025-4973
Risk Score
Threat Entry
Updated 2025-07-10
CVE-2025-5012 - Used By The Workreap Freelance Marketplace Theme
The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'workreap_temp_upload_to_media' function in all versions up to, and including, 3.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
THEME
Used By The Workreap Freelance Marketplace
CVE-2025-5012
Risk Score
Threat Entry
Updated 2025-06-12
CVE-2025-31396 - Allows Object Injection Theme
Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection. This issue affects FLAP - Business WordPress Theme: from n/a through 1.5.
THEME
Allows Object Injection
CVE-2025-31396
Risk Score