Skip to content
OpenAdvisories

Vendor

p-themes

8 known vulnerabilities.

Products

Porto Theme - Functionality 5 Porto 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-28075

    WordPress Porto theme <= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in p-themes Porto porto allows Reflected XSS.This issue affects Porto: from n/a through <= 7.6.2.

    p-themes Porto
  • High 8.8
    CVE-2024-3809

    Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta

    The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.9 via the 'slideshow_type' post meta. This makes it possible for authenticated attackers, with contributor-level and above per…

    p-themes Porto Theme - Functionality Web / CMS
  • High 8.8
    CVE-2024-3808

    Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the 'porto_portfolios' shortcode 'portfolio_layout' attribute. This makes it possible for authenticated attackers, with …

    p-themes Porto Theme - Functionality Web / CMS
  • High 8.8
    CVE-2024-3807

    Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta

    The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via 'porto_page_header_shortcode_type', 'slideshow_type' and 'post_layout' post meta. This makes it possible for authenticated attackers, with cont…

    p-themes Porto Web / CMS