Related VulnerabilitiesPoCCVE-2026-3326: XStore Theme < 9.7.3 - SQL InjectionXStore Theme / SQL 注入漏洞（CVE-2026-3326）PoCCVE-2024-10763: WordPress Campress Theme <= 1.35 - Unauthenticated Local File InclusionPoCCVE-2025-4524: WordPress Madara Theme < 2.2.2.1 - Local File InclusionPoCCVE-2025-2558: WordPress The Wound Theme <= 0.0.1 - Local File InclusionPoCwp-better-wp-security-fpd: WordPress Plugin iThemes Security - Full Path DisclosurePoCwp-twenty-theme-fpd: WordPress Twenty Seventeen - Full Path DisclosurePoCwordpress-storefront-fpd: WordPress Storefront Theme - Full Path DisclosureWordPress Plugin Alone Theme /wp-admin/admin-ajax.php beplus_import_pack_install_plugin 文件上传漏洞（CVE-2025-5394）PoCCVE-2025-47445: WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download