Starter Sites & Templates by Neve

Starter Sites & Templates by Neve has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Starter Sites & Templates by Neve has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Starter Sites & Templates by Neve is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Starter Sites & Templates by Neve vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2024-1047

ThemeIsle SDK <= Various Versions - Missing Authorization

Read the full analysis

Vulnerability Records

2 records
Starter Sites & Templates by Neve banner
Latestv1.4.4

Starter Sites & Templates by Neve

Themeisle

Author

Themeisle

4.7(77)
94/100
Last Updated
2026-08-20 (23d ago)
Active Installs
100,000+
Downloads
4,894,440
Requires WP
5.5+
Requires PHP
5.6+
Tested up to
WP 7.1
Created
2020-07-29 (6y ago)

A cloud based templates library which enables you to create or use existing ready-made website with 1-click. More than 100 Starter Sites and Templates available for the most popular page builders Browse a wide selection of templates and starter sites that are designed to help you build beautiful websites with Gutenberg. All templates can be previewed on demosites.io and you can seamlessly import them to any of your sites. Whether you’re a beginner or a seasoned pro, our templates can help you save time and create stunning websites without any coding knowledge. These templates are perfect for creating basic pages such as contact pages, about pages, and blog pages. External services The Starter Sites & Templates library is powered by a cloud service run by ThemeIsle. This section explains what data is sent to it and when. By using these features you agree to ThemeIsle’s Terms and Privacy Policy. No account is required to browse the free starter-sites collection. ThemeIsle starter-sites service (api.themeisle.com) The plugin contacts ThemeIsle’s service to fetch the starter-sites and templates catalog, to order it by relevance to your site (and to run searches), and to validate your license. For relevance ordering and search it sends your site address (home URL), your site title, the page builder you use, and — when you search — your search text; if you have a ThemeIsle license, it also sends your license key. These requests are made when you browse or search the library, and apply to local and staging sites too. Service provided by ThemeIsle — Terms, Privacy Policy.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C