Appointment Dark
Appointment Dark has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of November 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery, behind 1 of the records (100%).
The one issue recorded for Appointment Dark has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by beopseong.kim. Appointment Dark is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-125850Appointment Dark <= 1.3.4 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Appointment Dark
Author
webriti
appointmentAppointment Dark WordPress Theme is a fully responsive and translation-ready theme that allows you to create stunning blogs and websites. The theme is well suited for companies, law firms, travel, photography, recipes, design, art, personal, and any other creative websites and blogs. The theme is developed using Bootstrap 3 that makes it mobile and tablet friendly. It has various options in the WordPress Customizer to change the look of the theme. The theme customizer can be used to add your own custom header, favicon, logo, slides, services, callout, and much more. In the premium version, you can add different types of slides like video, aside, quote, status, and standard, all of which have a different HTML look. There are a number of in-built widgets; sidebars with support for WPML, the Polylang translation WordPress plugin and Contact Form 7; a portfolio template, contact us, portfolio column layouts, and many sections for business using the Homepage template. Just navigate to Appearance / Customize to start customizing.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C