P-Themes
7 CVEs across 2 P-Themes products. Browse P-Themes vulnerabilities, severities, and proof-of-concept exploits.
P-Themes products with known CVEs
P-Themes CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-28075 | High | 7.1 | 2026-03-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in p-themes Porto porto allows Reflected XSS.This issue affe… |
CVE-2025-63067 | Medium | 4.3 | 2025-12-09 | Missing Authorization vulnerability in p-themes Porto Theme - Functionality porto-functionality allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-63066 | Medium | 6.5 | 2025-12-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in p-themes Porto Theme - Functionality porto-functionality… |
CVE-2024-3809 | High | 8.8 | 2024-05-14 | The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.9 via the 'slideshow_type'… |
CVE-2024-3808 | High | 8.8 | 2024-05-14 | The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the 'porto_portfolio… |
CVE-2024-3807 | High | 8.8 | 2024-05-14 | The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via 'porto_page_header_shortcode_type', 'slides… |
CVE-2024-3806 | Critical | 9.8 | 2024-05-14 | The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes… |