Theme per user

Theme per user has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (100%).

The one issue recorded for Theme per user has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rafie Muhammad. Theme per user is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSCritical

9.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Theme per user vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2023-52181

Theme per user <= 1.0.1 - Unauthenticated PHP Object Injection

Read the full analysis

Vulnerability Records

1 records


2023-12-29 00:00	Theme per user <= 1.0.1 - Unauthenticated PHP Object Injection Theme per user <= 1.0.1	`CVE-2023-52181`	9.8 Critical	Rafie Muhammad	Yes

Showing 1–1 of 1 reports

Latestv1.0.6

Theme per user

Author

Presslabs

3.7(3)

74/100

Last Updated

2026-08-19 (25d ago)

Active Installs

70+

Downloads

8,702

Requires WP

3.8.1+

Requires PHP

Tested up to

WP 7.1

Created

2014-03-05 (13y ago)

Load one Theme for a specific user. You must set the theme from User Profile then logout and login again in order to take effect. Github repository https://github.com/presslabs/theme-per-user

View on WordPress.org