ColorMag

colormag · theme

Known security vulnerabilities for ColorMag. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

1 with public exploit code · latest Aug 20, 2025

Vulnerabilities

CVE-2024-0679
ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation
Medium 6.5
CVE-2024-2500
ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Medium 6.4
CVE-2025-9202
ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Medium 4.3