Download Theme
Download Theme has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Download Theme has a vendor fix available, so running the current release closes it.
All of these findings were reported by István Márton. Download Theme is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2022-38062Download Theme <= 1.0.9 - Cross-Site Request Forgery via dtwap_download()
Read the full analysisVulnerability Records
Download Theme
Author
Metagauss
Download Theme allows you to download any theme directly from your WordPress dashboard. It adds the download link right on the theme listing page, on each theme, as shown in the screenshot. Just activate this plugin. You can see Download link on each theme box on Appearance page. Click on any of them and that theme’s zip will be downloaded to your computer. Cheers! Download Theme Services Download Theme now offers Theme Services. If you need expert help setting up your WordPress theme, simply go to your WordPress dashboard, navigate to the Help button in the top right corner, and click on Get Help Now. Download Plugin If you want to download any plugin from your WordPress admin panel’s Plugins page, then use our other plugin – Download Plugin
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C