Customizr

Customizr has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (100%).

Every one of the 2 issues recorded for Customizr has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Customizr is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Customizr vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-35771

Customizr <= 4.4.21 - Cross-Site Request Forgery to Notice Dismissal

Read the full analysis

Vulnerability Records

2 records


2024-06-18 00:00	Customizr <= 4.4.21 - Cross-Site Request Forgery to Notice Dismissal Customizr <= 4.4.21	`CVE-2024-35771`	4.3 Medium	Dhabaleshwar Das	Yes
2020-09-26 00:00	Customizr <= 4.3.0 - Cross-Site Request Forgery Bypass Customizr <= 4.3.0	`CVE-2020-36755`	4.3 Medium	Jerome Bruandet	Yes

Showing 1–2 of 2 reports

Latestv4.4.24

Customizr

Author

presscustomizr

4.8(993)

96/100

Last Updated

2024-12-11 (2y ago)

Active Installs

30,000+

Downloads

4,270,719

Requires WP

Requires PHP

5.3+

Created

2013-05-16 (14y ago)

Customizr is a simple and fast WordPress theme designed to help you attract and engage more visitors. Provides a perfect user experience on smartphones. Powers more than 100K active sites around the world. Hundreds of 5-stars reviews received on WordPress.org.