ColorMag

ColorMag has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.5 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for ColorMag has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. ColorMag is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ColorMag vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2024-0679

ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation

Read the full analysis

Vulnerability Records

3 records


2025-08-19 00:00	ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation ColorMag <= 4.0.19	`CVE-2025-9202`	4.3 Medium	Dmitrii Ignatyev	Yes
2024-03-21 00:00	ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name ColorMag <= 3.1.6	`CVE-2024-2500`	6.4 Medium	stealthcopter	Yes
2024-01-19 00:00	ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation ColorMag <= 3.1.2	`CVE-2024-0679`	6.5 Medium	Sean Murphy	Yes

Showing 1–3 of 3 reports

Latestv4.2.4

ColorMag

Author

ThemeGrill

4.9(1,566)

98/100

Last Updated

2026-09-07 (6d ago)

Active Installs

40,000+

Downloads

4,476,862

Requires WP

5.0+

Requires PHP

7.4+

Created

2015-05-30 (11y ago)

ColorMag is a fast, flexible WordPress theme built for news portals, online magazines, personal blogs, and publishing sites. Trusted by 50,000+ publishers worldwide, it's the #1 news & magazine theme on WordPress.org. Whether you're launching a breaking news site, a lifestyle magazine, or a niche blog, ColorMag gives you everything you need out of the box — no coding required. It comes with 30+ one-click starter demos for news, health, sports, entertainment, and fashion niches. It integrates deeply with the Magazine Blocks plugin (21+ custom Gutenberg blocks for post layouts), includes built-in ad widget areas for easy monetization, and is optimized for Core Web Vitals and fast load times. Full Gutenberg support, WooCommerce compatibility, RTL and translation ready in 35+ languages, and clean SEO-friendly markup are all included. Download ColorMag free and get your news or magazine site live in minutes. Checkout our import ready starter sites at: https://themegrilldemos.com/#/themes/colormag