Theme Test Drive
Theme Test Drive has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.
2 independent researchers contributed these findings, one record each. Theme Test Drive is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.
CVE-2026-32464Theme Test Drive <= 2.9.1 - Unauthenticated Local File Inclusion
Read the full analysisVulnerability Records
Theme Test Drive
Author
Vladimir Prelovac
Theme Test Drive WordPress plugin allows you to safely test drive any theme on your blog as administrator, while visitors still use the default one. It happens completely transparent and they will not even notice you run a different theme for yourself. Best part is you can even set the testing theme options (if it has them) in the Admin panel while you are testing the theme. You can also preview any theme by adding “?theme=xxx” to your blog URL. For example http://www.myblog.com/?theme=Default Plugin by Vladimir Prelovac. Managing more than one WordPress sites? Check out ManageWP. Credits Some of the functions of Theme Test Drive plugin came from other plugins. So I can at least thank these people: Ryan Boren for his Theme Switcher plugin Andres Santos for his wp-websnapr plugin Oliver for his cforms II plugin Scott for his excellent readme.txt file WebSnapr folks for their service Thanks. License This file is part of Theme Test Drive. Theme Test Drive is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. Theme Test Drive is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with Theme Test Drive. If not, see http://www.gnu.org/licenses/.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C