Attire

Attire has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (100%).

The one issue recorded for Attire has a vendor fix available, so running the current release closes it.

All of these findings were reported by Francesco Carlucci. Attire is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSHigh

8.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Attire vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-7435

Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection

Read the full analysis

Vulnerability Records

1 records


2024-08-30 14:33	Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection Attire <= 2.0.6	`CVE-2024-7435`	8.8 High	Francesco Carlucci	Yes

Showing 1–1 of 1 reports

Latestv2.1.0

Attire

Author

Shafaet Alam

5.0(15)

100/100

Last Updated

2025-07-05 (1y ago)

Active Installs

300+

Downloads

75,841

Requires WP

Requires PHP

5.6+

Created

2018-03-26 (9y ago)

Attire is a very fast, mobile responsive, highly customizable, SEO friendly multipurpose theme. It was built with the Gutenberg editor in mind and offers hundreds of customization options which allows to make a website look exactly the way you intended. Create any type of website, such as business agency, shop, corporate, education, restaurant, blog, portfolio, landing page and so on. This theme allows to customize pages with google-fonts, page background, page header and sidebars. Try Demo: https://demo.wpattire.com. Attire is # Super Fast # WooCommerce Ready # Gutenberg Block Ready # RTL & Translation Ready # Also Compatible with all major page builders like elementor, divi, visual composer.