theme
11 known security issues reported for the Greenmart WordPress theme. Most recent disclosed Dec 30, 2025.
Running Greenmart on your site? Check whether your installed version is affected.
Scan your site free[en] Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.11.
The Greenmart theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.2.11. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This...
[en] Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart allows PHP Local File Inclusion. This issue affects Greenmart: from n/a through 4.2.3.
The Greenmart theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.2.3. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, o...
The Greenmart theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'callback' parameter in the 'admin-ajax.php' file in versions up to, and including, 2.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scr...
Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability found by ErwanLR (WPScan) in WordPress Greenmart premium theme (versions <= 2.5.1).
The Greenmart theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'callback' parameter in the 'admin-ajax.php' file in versions up to, and including, 2.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scr...
Reflected Cross-Site Scripting (XSS) vulnerability found by Cyber Security Works Pvt. Ltd in WordPress Greenmart premium theme (versions <= 2.4.2).
[en] The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS.
The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS.
Due to an incomplete fix of CVE-2020-16140 (see https://wpscan.com/vulnerability/10444), the reflected XSS attack is still possible on unauthenticated users, by extracting the search_nonce from the source of the homepage and adding it to the original payload. This is possible because WP nonces are tied to the logged in...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free