Security WordPress Refraction Theme XSS / Content Spoofing / Path Disclosure September 30, 2014 007admin WordPress Refraction theme suffers from cross site scripting, path disclosure, and content spoofing vulnerabilities.