Corpiva
Corpiva has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Corpiva has a vendor fix available, so running the current release closes it.
All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). Corpiva is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-32344Corpiva <= 1.0.96 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Corpiva
Author
Desert Themes
Corpiva is lightweight, highly extendable and multi-purpose WordPress Theme. Corpiva is perfect for Startup, IT Solutions, IT Business, Agencies, Marketing, Consulting and Services Company related to any business websites. Corpiva based on in-depth research into IT Solutions, IT Services, IT Business, Consulting & Software, Digital Solution, Technical Engineering, Technology, and Services Company, to deliver all needed layouts and blocks. It will enable you to create almost any type of website with a beautiful & professional design. Corpiva supports popular WordPress plugins such as Elementor, WPML, Polylang, Yoast SEO, WooCommerce, Contact Form 7, Jetpack, and much more. Corpiva Pro demo https://preview.desertthemes.com/pro/corpiva/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C