theme
6 known security issues reported for the Bard WordPress theme. Most recent disclosed Jan 22, 2026.
Running Bard on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in wproyal Bard bard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bard: from n/a through <= 2.229.
The Bard theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.229. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.
[en] Cross-Site Request Forgery (CSRF) vulnerability in WP Royal Bard allows Cross Site Request Forgery.This issue affects Bard: from n/a through 2.210.
[en] The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.216. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can su...
The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.216. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can success...
The Bard theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.210. This is due to missing or incorrect nonce validation on the bard_activation_notice() function. This makes it possible for unauthenticated attackers to dismiss notices via a forged request granted they can t...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free