Skip to contentP-themes Porto vulnerabilities
- p-themes porto theme - functionalityWordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerabilityCVE-2026-424159.3 Critical
- p-themes portoWordPress Porto theme <= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2026-280757.1 High
- p-themes porto theme - functionalityWordPress Porto Theme - Functionality plugin < 3.7.3 - Broken Access Control vulnerabilityCVE-2025-630674.3 Medium
- p-themes porto theme - functionalityWordPress Porto Theme - Functionality plugin < 3.7.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-630666.5 Medium
- p-themes porto theme - functionality, porto theme - functionality +1 moreWordPress Porto Theme Functionality plugin < 2.12.1 - Broken Access Control vulnerabilityCVE-2023-487395.3 Medium
- p-themes porto theme - functionality, portotheme functionality +1 morePorto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post MetaCVE-2024-38098.8 High
- p-themes porto theme - functionalityPorto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via ShortcodeCVE-2024-38088.8 High
- p-themes portoPorto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_postsCVE-2024-3806Public exploit9.8 Critical
- p-themes portoPorto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post MetaCVE-2024-38078.8 High
- p-themes porto theme - functionality, porto theme - functionality, portotheme functionality +2 moreWordPress Porto Theme - Functionality Plugin < 2.12.1 is vulnerable to SQL InjectionCVE-2023-487389.3 Critical