Ashe

Ashe has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 3 issues recorded for Ashe has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Ashe is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Ashe vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-9777

Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter

Read the full analysis

Vulnerability Records

3 records


2026-02-12 00:00	Ashe <= 2.267 - Missing Authorization Ashe <= 2.267	`CVE-2026-39627`	4.3 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2024-11-18 23:50	Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter Ashe <= 2.243	`CVE-2024-9777`	6.1 Medium	vgo0	Yes
2024-07-01 00:00	Ashe <= 2.233 - Cross-Site Request Forgery to Notice Dismissal Ashe <= 2.233	`CVE-2024-37478`	4.3 Medium	Dhabaleshwar Das	Yes

Showing 1–3 of 3 reports

Latestv2.273

Ashe

Author

WP Royal

4.9(303)

98/100

Last Updated

2026-08-07 (1mo ago)

Active Installs

30,000+

Downloads

2,410,682

Requires WP

4.7+

Requires PHP

5.2.4+

Created

2018-01-22 (9y ago)

Personal and Multi-Author Free WordPress Blog Theme. Perfect for personal, lifestyle, health & fitness, food, cooking, bakery, travel, beauty, fashion, wedding, photography, news, quotes blog, auto blog, small business website and any other kind of amazing blogs. Minimal, elegant & mobile friendly layout with WooCommerce shop (storefront) support will WOW and inspire your visitors. Well documented and very easy to use even for WordPress beginners. Clean and Modern Responsive design will perfectly showcase your content on any device, even on tablet, mobile & retina displays. Very fast, compatibility with many popular plugins & of course translation & RTL (right to left language) ready, coded with best SEO practices. The theme has features like Text & Image logo, Fullscreen Slider, Header image, Instagram slider widget support, footer menu support, GDPR compatibility plugins support and many more. Works perfectly with all major drag and drop page builders like Elementor, Beaver Builder, Visual Composer, SiteOrigin, Divi. You just need to write and be awesome! TEMPLATE DEMO: https://ashe-free.wp-royal-themes.com/demo/