Graphene

Graphene has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Graphene has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Graphene is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Graphene vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-81281

Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2026-09-02 00:00	Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting Graphene <= 2.9.4	`CVE-2026-81281`	6.4 Medium	HieuPenguinnn	Yes
2024-03-19 00:00	Graphene <= 2.9.2 - Missing Authorization Graphene <= 2.9.2	`CVE-2024-1984`	5.3 Medium	Krzysztof Zając	Yes

Showing 1–2 of 2 reports

Latestv2.9.6

Graphene

Author

silverks

4.7(83)

94/100

Last Updated

2026-08-25 (19d ago)

Active Installs

10,000+

Downloads

1,534,540

Requires WP

4.7+

Requires PHP

5.6.0+

Created

2010-08-10 (16y ago)

We believe that every theme should facilitate creative writing, not hinder it. We also believe that each site should have the opportunity to be unique. Since the beginning, we have listened to countless suggestions and requests for features that really matter. Here's a theme that's user-friendly, feature-packed, and endlessly customisable, for both beginners and advanced creators. Feel at home with more than 40 languages and backed with active community support, where questions, ideas and suggestions are always welcomed. Now Gutenberg compatible.