Skip to content
OpenAdvisories

Vendor

p-themes

8 known vulnerabilities.

Products

Porto Theme - Functionality 5 Porto 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-42415

    WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.

    p-themes Porto Theme - Functionality
  • Critical 9.8
    CVE-2024-3806 Public exploit

    Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

    The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, all…

    p-themes Porto Web / CMS