What’s Vulnerable › Products

P-THEMES Porto vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your P-THEMES Porto version is affected

Latest P-THEMES Porto vulnerabilities

• CVE-2026-28075 — WordPress Porto theme <= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-3807 — Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta (CVSS 8.8)
• CVE-2024-3806 — Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts (CVSS 9.8)