Esplanade

Esplanade has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Esplanade has a vendor fix available, so running the current release closes it.

All of these findings were reported by Kacper Szurek. Esplanade is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 11 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Esplanade vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Esplanade < 1.1.5 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2015-05-26 00:00	Esplanade < 1.1.5 - Cross-Site Scripting Esplanade < 1.1.5	`N/A`	6.1 Medium	Kacper Szurek	Yes

Showing 1–1 of 1 reports

Latestv1.1.5

Esplanade

Author

Daniel Tara

2.5(8)

50/100

Last Updated

2015-01-17 (12y ago)

Active Installs

700+

Downloads

217,558

Requires WP

3.6+

Requires PHP

Created

2012-03-21 (15y ago)

A stylish, modern and flexible theme with responsive layout. Includes several custom templates, layouts and color schemes to choose from, 5 widget-ready areas and a user friendly options page to keep everything in control.