Esotera

Esotera has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Esotera has a vendor fix available, so running the current release closes it.

All of these findings were reported by stealthcopter. Esotera is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Esotera vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-43952

Esotera <= 1.2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-08-26 00:00	Esotera <= 1.2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Esotera <= 1.2.5.1	`CVE-2024-43952`	6.4 Medium	stealthcopter	Yes

Showing 1–1 of 1 reports

Latestv1.4.0

Esotera

Author

CryoutCreations

4.6(7)

92/100

Last Updated

2025-10-28 (11mo ago)

Active Installs

700+

Downloads

65,399

Requires WP

4.5+

Requires PHP

7.0+

Created

2019-06-23 (7y ago)

Colorful, clean and animated - Esotera is a highly customizable, multipurpose responsive theme that’s perfect for your blog, portfolio, photography or business website. Features: Lightweight, SEO Ready (microformats and Schema.org microdata), Responsive, WooCommerce, Google Fonts, Multi-language, RTL, Gutenberg / Block editor support, Landing Page, Masonry, Socials, Slider, Customizable layouts (Wide / Boxed) and widget areas, Customizable colors and post metas. Demo: https://demos.cryoutcreations.eu/wp/esotera