Fitness FSE
Fitness FSE has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Fitness FSE has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by 0xd4rk5id3. Fitness FSE is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-25394Fitness FSE <= 1.0.6 - Missing Authorization
Read the full analysisVulnerability Records

Fitness FSE
Author
Sparkle WP
The Fitness Full site editing WordPress theme is a specifically designed for businesses in the health and wellness industry, such as spas, yoga studios, beauty salons, wellness centers, and natural healthcare providers. With this theme, you can easily create a professional and engaging website that resonates with your target audience and grows your business. Official Support Forum: https://sparklewpthemes.com/contact/ Demo: https://demo.sparkletheme.com/fitness-fse/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C