Custom Community

Custom Community has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 8.3, and the most serious one scores 8.3 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Custom Community has a vendor fix available, so running the current release closes it.

All of these findings were reported by James Hooker. Custom Community is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 8 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSHigh

8.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Custom Community vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.3

Custom Community 2.0 - 2.0.24 - Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2015-03-09 00:00	Custom Community 2.0 - 2.0.24 - Stored Cross-Site Scripting Custom Community 2.0 – < 2.0.25	`N/A`	8.3 High	James Hooker	Yes

Showing 1–1 of 1 reports

Latestv2.1.2

Custom Community

Author

Macho Themes

4.5(236)

90/100

Last Updated

2017-12-02 (9y ago)

Active Installs

600+

Downloads

732,092

Requires WP

Requires PHP

Created

2010-10-08 (16y ago)

Professional-grade responsive and extremely adaptable WordPress Customizer theme. Featuring the latest Bootstrap and Font Awesome versions, with a few sane improvements, 3 pre-defined colour schemes, user-friendly Slideshow integration and including 140+ settings to customize your site to YOUR choices. Supports BuddyPress, WooCommerce and most common plugins out of the box.