WPShapere Lite

WPShapere Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for WPShapere Lite has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Skalucy. WPShapere Lite is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all WPShapere Lite vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-53317

WPShapere - WordPress admin theme <= 1.4.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2025-06-27 00:00	WPShapere - WordPress admin theme <= 1.4.1 - Cross-Site Request Forgery WPShapere Lite <= 1.4.1	`CVE-2025-53317`	4.3 Medium	Skalucy	No

Showing 1–1 of 1 reports

Latestv1.4.1

WPShapere Lite

Author

AcmeeDesign

5.0(3)

100/100

Last Updated

2025-06-29 (1y ago)

Active Installs

200+

Downloads

6,463

Requires WP

6.0+

Requires PHP

5.6+

Tested up to

WP 6.8.8

Created

2020-06-05 (6y ago)

WPShapere WordPress Admin Theme is a WordPress plugin and a powerful tool to customize your WordPress admin. It will totally white label the WordPress admin section. With WPShapere you have the ability to offer your customers a complete new admin dashboard with your brand name. WPShapere has Simple to use user interface to manage the colors and some of the elements of the WordPress admin theme. Key Features Unlimited color options + 5 pre-made Pro themes. Flat/Default design. White Label Branding. Upload custom logo for login and dashboard pages. RTL Compatibility. Custom login Theme. Hide unwanted widgets from dashboard. Manage Admin Bar elements. Hide WordPress version from the footer and add your company name or any text you want. Export and Import of settings feature. Powerful and simple to use Options panel. Add custom css styles to login and admin pages. Tested for Compatibility with popular plugins: Contact form 7, WP Super cache, WP Total cache, woocommerce, Elementor etc. Pro Version Features WPShapere Pro Version Unlimited color options + 16 pre-made Pro themes. Hide, rename and sort admin menu items. Privilege Users who can access to all menu items. Custom Icons for admin menu items: Dashicons, FontAwesome and Line icons Modern custom login Theme with 3 preset themes. Manage and Create custom dashboard widgets. Hide unwanted Metaboxes from the posts and pages. Ability to add custom links to the admin bar. White Label Emails. Multi-site Network Support – Global option/Individual blog option. And much more…

View on WordPress.org