Allegiant

Allegiant has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2024; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Code Injection, behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, one record each. Allegiant is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 5 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSHigh

8.1/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Allegiant vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-43329

Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-08-16 00:00	Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Allegiant <= 1.2.7	`CVE-2024-43329`	6.4 Medium	stealthcopter	No
2020-10-01 00:00	Epsilon Framework Themes (Various Versions) - Function Injection Allegiant <= 1.2.2	`CVE-2020-36708`	9.8 Critical	Jerome Bruandet	Yes

Showing 1–2 of 2 reports

Latestv1.2.7

Allegiant

Author

WP Chill

4.0(33)

80/100

Last Updated

2021-03-03 (6y ago)

Active Installs

1,000+

Downloads

388,755

Requires WP

Requires PHP

5.6+

Created

2015-10-12 (11y ago)

Allegiant is a free multipurpose WordPress theme perfect for agencies and professionals. This theme comes with support for a full homepage slider, feature blocks, portfolios, services, team members, and even testimonials, all thanks to its companion plugin CPO Content Types. Allegiant is one of the best business WordPress themes thanks to its neutral design and extreme flexibility. Moreover, this theme also integrates with popular plugins such as WooCommerce, Yoast SEO, WPML, and Contact Form 7.