Fitness Park

Fitness Park has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

None of the 3 issues recorded for Fitness Park have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.

2 independent researchers contributed these findings, most of them (2) reported by Dave Jong. Fitness Park is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 2 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Fitness Park vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-50033

Fitness Park <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-06-19 00:00	Fitness Park <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Fitness Park <= 1.1.1	`CVE-2025-50033`	6.4 Medium	Peter Thaleikis	No
2023-05-16 00:00	Multiple sparklewpthemes Themes (Various versions) - Cross-Site Request Forgery to Arbitrary Plugin Activation Fitness Park *	`CVE-2023-32959`	5.3 Medium	Dave Jong	No
2023-05-16 00:00	Multiple sparklewpthemes Themes (Various versions) - Missing Authorization to Arbitrary Plugin Activation Fitness Park *	`CVE-2023-32959`	5.3 Medium	Dave Jong	No

Showing 1–3 of 3 reports

Latestv1.1.1

Fitness Park

Author

Sparkle WP

5.0(2)

100/100

Last Updated

2024-09-11 (2y ago)

Active Installs

100+

Downloads

20,594

Requires WP

6.4+

Requires PHP

7.0+

Created

2019-03-05 (8y ago)

Fitness Park is a user-friendly and feature-rich, intuitive and creative, powerful and impressive engaging and dynamic, tech-savvy and good looking, rapidly responsive personal trainer free WordPress theme. Its a solid toolkit for the development of awesome and modern free WordPress themes for gym centers, fitness studios, yoga studios, and CrossFit. Fitness Park multipurpose theme can also be used for other related fitness center or needs of health clubs, gymnasiums, spas and wellness centers, indoor and outdoor exercises and any other sport and health-related website. Fitness Park is one of the most accessible free WordPress themes which can easily accommodate all type of users with no coding skills to advanced or normal web developers. Fitness Park includes excellent features for gymnasiums professionals and practices of all kinds, themes have included following features one-click demo data import, customizer based theme options, page builder-friendly design, individual page & post layout options. This Free Fitness Park WordPress theme is fully responsive, cross-browser compatible, translation ready, SEO friendly themes. if you face any problem while using our theme, you can refer to our theme documentation or contact our friendly support team. Check demo at http://demo.sparklewpthemes.com/fitnesspark/ and Read theme details at https://sparklewpthemes.com/wordpress-themes/fitnesspark and get free support at https://sparklewpthemes.com/support/