Skip to content
OpenAdvisories

Product · scriptsbundle

DWT - Directory & Listing WordPress Theme

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-0169

    DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The DWT - Directory & Listing WordPress Theme is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo…

    scriptsbundle DWT - Directory & Listing WordPress Theme Web / CMS
  • Medium 6.1
    CVE-2025-0170

    DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting

    The DWT - Directory & Listing WordPress Theme is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping on the 'sort_by' and 'token' parameters. This makes it possible fo…

    scriptsbundle DWT - Directory & Listing WordPress Theme Web / CMS