Chaplin

Chaplin has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Chaplin has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Trương Hữu Phúc. Chaplin is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Chaplin vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-74021

Chaplin <= 2.6.8 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Chaplin screenshot
Latestv2.6.8
5.0(36)
100/100
Last Updated
2024-10-21 (2y ago)
Active Installs
2,000+
Downloads
158,711
Requires WP
0+
Requires PHP
5.4+
Created
2019-07-01 (7y ago)

Chaplin is a feature-packed and developer friendly WordPress theme that gives you full control over the fonts and colors on your site. It is built from the ground-up with the new Block Editor in mind, and makes it easy to create good looking layouts on both posts and pages. This flexibility makes Chaplin suitable for pretty much any type of website, including business sites and portfolios. All of the fonts and colors in the theme can be easily modified within the Customizer, allowing you to create a unique look and feel for your site in less than a minute. All fonts on Google Fonts are supported, and you can choose one of the ten included color schemes or build one from scratch. Any changes you make to the fonts and colors are reflected in the editor styles for both the Block Editor and the Classic Editor, so you always have a good idea of the end result when you create your content. Chaplin also includes a cover template with a hero image (pictured in the screenshot), infinite scroll on archive pages, settings for what post meta to display on archive pages and single posts, custom logo support, two widget areas, a search overlay, full-width templates, a sticky header option, a social menu with icons, author bio, breadcrumbs, a responsive design, a lightweight construction to ensure quick load times, support for Jetpack Portfolio and CoBlocks, child theme friendly code, and much more. Demo: https://andersnoren.se/themes/chaplin/

Tags
BlogPortfolioOne columnCustom logoCustom menuGrid layoutSticky postWide blocksBlock editor stylesEditor styleCustom colorsTheme optionsFooter widgetsFeatured imagesCustom backgroundThreaded commentsTranslation readyFull width template

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C