Theme Test Drive

Theme Test Drive has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. Theme Test Drive is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.

Strategic Overview

Avg CVSSHigh
7.1/ 10
Patch Coverage50%
Open

1

Fixed

1

Get automatic notifications for all Theme Test Drive vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1CVE-2026-32464

Theme Test Drive <= 2.9.1 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv2.9.1

Theme Test Drive

Vladimir Prelovac

Author

Vladimir Prelovac

3.9(50)
78/100
Last Updated
2017-11-28 (9y ago)
Active Installs
7,000+
Downloads
522,593
Requires WP
2.3+
Requires PHP
0+
Tested up to
WP 4.3.34
Created
2008-02-12 (19y ago)

Theme Test Drive WordPress plugin allows you to safely test drive any theme on your blog as administrator, while visitors still use the default one. It happens completely transparent and they will not even notice you run a different theme for yourself. Best part is you can even set the testing theme options (if it has them) in the Admin panel while you are testing the theme. You can also preview any theme by adding “?theme=xxx” to your blog URL. For example http://www.myblog.com/?theme=Default Plugin by Vladimir Prelovac. Managing more than one WordPress sites? Check out ManageWP. Credits Some of the functions of Theme Test Drive plugin came from other plugins. So I can at least thank these people: Ryan Boren for his Theme Switcher plugin Andres Santos for his wp-websnapr plugin Oliver for his cforms II plugin Scott for his excellent readme.txt file WebSnapr folks for their service Thanks. License This file is part of Theme Test Drive. Theme Test Drive is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. Theme Test Drive is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with Theme Test Drive. If not, see http://www.gnu.org/licenses/.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C