Skip to content
OpenAdvisories

Vendor

p-themes

8 known vulnerabilities.

Products

Porto Theme - Functionality 5 Porto 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-3806 Public exploit

    Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

    The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, all…

    p-themes Porto Web / CMS