Chameleon

Chameleon has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Chameleon has a vendor fix available, so running the current release closes it.

All of these findings were reported by Hoang Van Hiep. Chameleon is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Chameleon vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5CVE-2022-44736

Chameleon <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Chameleon banner
Latestv1.4.9
3.4(5)
68/100
Last Updated
2025-07-19 (1y ago)
Active Installs
200+
Downloads
31,529
Requires WP
3.0.1+
Requires PHP
7.0+
Tested up to
WP 6.8.8
Created
2017-01-20 (10y ago)

Author: Fahad Mahmood Project URI: https://androidbubble.com/blog/wordpress/plugin/chameleon Chameleon is a revolutionary convenience among WordPress plugin world, it’s an idea to provide easy styling for all kind of layout templates. It helps you to choose a unique theme for your favorite plugin, form, templates and themes. Initially a few famous plugins are added in compatibility list but later more plugins will be added. To bring freshness in styles and features, we are using GitHub so public can participate in styles too. People can push their own styles and/or corrections in existing list. We are excited to offer this idea especially for WordPress default twenty series theme. WordPress audience will must like this ready to go thing. Tags contact form 7, skins, style, contact form, gravity forms, woocommerce, buddypress, acf, custom fields, chameleon, styling, themes, layout, github, alphabetic, pagination, templates Video Tutorials 1) Chameleon Introduction 2) Contact From 7 with Chameleon 3) Gravity Forms with Chameleon Compatibility List Guava Pattern WooCommerce Contact Form 7 Gravity Forms ACF BuddyPress Arbitrary section I would appreciate the suggestions related to new features. Please don’t forget to support this free plugin by giving your awesome reviews. A brief Markdown Example License This WordPress Plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version. This free software is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this software. If not, see http://www.gnu.org/licenses/gpl-2.0.html.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C