Bard

Bard has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each. Bard is installed on roughly 9,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.9/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Bard vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-63018

Bard <= 2.229 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records


2025-10-31 15:58	Bard <= 2.229 - Missing Authorization Bard <= 2.229	`CVE-2025-63018`	4.3 Medium	Mohamad Fattyr	No
2024-11-18 23:46	Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter Bard <= 2.216	`CVE-2024-9830`	6.1 Medium	vgo0	Yes
2024-07-04 00:00	Bard <= 2.210 - Cross-Site Request Forgery to Notice Dismissal Bard <= 2.210	`CVE-2024-37490`	4.3 Medium	Dhabaleshwar Das	Yes

Showing 1–3 of 3 reports

Latestv2.235

Bard

Author

WP Royal

4.8(87)

96/100

Last Updated

2026-07-24 (2mo ago)

Active Installs

9,000+

Downloads

1,036,582

Requires WP

4.7+

Requires PHP

5.2.4+

Created

2018-04-30 (9y ago)

Personal and Multi-Author Free WordPress Blog Theme. Perfect for personal, lifestyle, health & fitness, food, cooking, bakery, travel, beauty, fashion, wedding, photography, news, quotes blog, auto blog, small business website and any other kind of amazing blogs. Minimal, elegant & mobile friendly layout with WooCommerce shop (storefront) support will WOW and inspire your visitors. Well documented and very easy to use even for WordPress beginners. Clean and Modern Responsive design will perfectly showcase your content on any device, even on tablet, mobile & retina displays. Very fast, compatibility with many popular plugins & of course translation & RTL (right to left language) ready, coded with best SEO practices. The theme has features like Text & Image logo, Fullscreen Slider, Header image, Instagram slider widget support, footer menu support, GDPR compatibility plugins support and many more. Works perfectly with all major drag and drop page builders like Elementor, Beaver Builder, Visual Composer, SiteOrigin, Divi. You just need to write and be awesome! TEMPLATE DEMO: http://bard-free.wp-royal-themes.com/demo/