Advisories · Technology

p-themes Porto Theme - Functionality.

Every CVE that names p-themes Porto Theme - Functionality among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42415 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability
- p-themes Porto Theme - Functionality
- SQL injection
Not analysed yet 6 Oct 2026
CVE-2025-63067 CVE record

CVSS 4.3 Medium

WordPress Porto Theme - Functionality plugin < 3.7.3 - Broken Access Control vulnerability
- p-themes Porto Theme - Functionality
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-63066 CVE record

CVSS 6.5 Medium

WordPress Porto Theme - Functionality plugin < 3.7.3 - Cross Site Scripting (XSS) vulnerability
- p-themes Porto Theme - Functionality
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2025
CVE-2024-3808 CVE record

CVSS 8.8 High

Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- P-THEMES Porto Theme - Functionality
- File inclusion
Not analysed yet 9 May 2024
CVE-2024-3809 CVE record

CVSS 8.8 High

Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta
- P-THEMES Porto Theme - Functionality
- File inclusion
Not analysed yet 9 May 2024