evolve
evolve has one disclosed vulnerability in the WordSec catalog, all reported in 2011; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for evolve has a vendor fix available, so running the current release closes it.
evolve is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 3 years, so new fixes are unlikely to arrive on their own.
CVE-2011-3852Evolve < 1.2.7 - Cross-Site Scripting
Read the full analysisVulnerability Records
evolve
Author
Evgeny Viner
Evolve by Theme4Press is an eye-catching and minimal WordPress theme, built for web enthusiasts who like effective, flexible, SEO-friendly great-looking websites. It's based on two solid frameworks - Twitter Bootstrap and Kirki framework, with a focus on details and usability, which progresses this theme to the next level, we are not afraid to say to a PREMIUM one. The greatness of this theme is not only in the multiple settings available and many theme options but also in its flexibility, which lets you build any website of your needs - if it's just a blog, e-shop, magazine, or any kind of business page. The theme key features are 2 header layouts, 13 widget areas, 3 unique sliders, up to 12 social media links, wide or boxed customizable layout, custom front page builder with up to 4 elements, up to 3 blog layouts with multiple options, full WooCommerce support, and many other useful styling options. Also with the great addition of the Demo Awesome plugin, it adds the extra 1-click starter demo data option. See all demos here https://demo.theme4press.com/. We keep working on the theme constantly, making it better and better every day. Download it to experience it all for yourself!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C