P-THEMES

Products

ProductCVEsExploitedLatest
Porto Theme - Functionality5–Oct 6, 2026
Porto3–Mar 5, 2026

Exploited and recent CVEs

  • CVE-2026-42415 Critical 9.3 WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability 0.2%
  • CVE-2026-28075 High 7.1 WordPress Porto theme <= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63067 Medium 4.3 WordPress Porto Theme - Functionality plugin < 3.7.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-63066 Medium 6.5 WordPress Porto Theme - Functionality plugin < 3.7.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-3808 High 8.8 Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode 1.0%
  • CVE-2024-3809 High 8.8 Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta 1.0%
  • CVE-2024-3806 Critical 9.8 Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts 2.7%
  • CVE-2024-3807 High 8.8 Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta 1.5%