Grace Mag

Grace Mag has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is PHP Remote File Inclusion, behind 1 of the records (100%).

The one issue recorded for Grace Mag has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Dimas Maulana. Grace Mag is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 3 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSCritical

9.8/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Grace Mag vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2025-39360

Grace Mag <= 1.1.5 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

1 records


2025-04-21 00:00	Grace Mag <= 1.1.5 - Unauthenticated Local File Inclusion Grace Mag <= 1.1.5	`CVE-2025-39360`	9.8 Critical	Dimas Maulana	No

Showing 1–1 of 1 reports

Latestv1.1.5

Grace Mag

Author

everestthemes

4.0(6)

80/100

Last Updated

2023-04-13 (4y ago)

Active Installs

400+

Downloads

70,496

Requires WP

Requires PHP

5.6+

Created

2019-11-20 (7y ago)

Grace Mag is a free WordPress theme that is perfect for your news sites and magazine sites. Grace magazine is suitable for creating the magazine, blog, news and personal sites. Grace magazine is responsive to all types of screens. Grace News and magazine theme is highly customizable from WordPress live customizer. This theme is simple, well optimized for SEO and requiring no effort to customize. The responsive layout of the theme gives your website an excellent look at all devices and screen resolutions. It is a Speed & SEO optimized theme which helps your website perform well in search engine ranking. Furthermore, it is cross-browser compatible and looks beautiful on any device and screen sizes.