Diamond

Diamond has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Diamond has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by João Pedro Soares de Alcântara. Diamond is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 9 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Diamond vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-69391

Diamond <= 2.4.8 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-02-11 00:00	Diamond <= 2.4.8 - Reflected Cross-Site Scripting Diamond <= 2.4.8	`CVE-2025-69391`	6.1 Medium	João Pedro Soares de Alcântara	No

Showing 1–1 of 1 reports

Latestv1.2.1

Diamond

Author

eightpixeldesign

5.0(1)

100/100

Last Updated

2017-02-01 (10y ago)

Active Installs

300+

Downloads

37,629

Requires WP

4.1+

Requires PHP

Created

2015-12-14 (11y ago)

Created by EightPixelDesign, Diamond is a modern Magazine Theme for a local news or any other content focused website. The magazine-styled homepage is built with WordPress core features like Customizer and Widgets, which makes the setup super fast, flexible and easy. The theme comes with a beautiful Featured Content area and responsive design, looking great on every device.