Hello FSE

Hello FSE has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Hello FSE has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by 0xd4rk5id3. Hello FSE is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 2 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Hello FSE vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-25393

Hello FSE <= 1.0.6 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2026-01-30 00:00	Hello FSE <= 1.0.6 - Missing Authorization Hello FSE <= 1.0.6	`CVE-2026-25393`	4.3 Medium	0xd4rk5id3	No

Showing 1–1 of 1 reports

Latestv1.0.6

Hello FSE

Author

Sparkle WP

1.0(1)

20/100

Last Updated

2024-02-28 (3y ago)

Active Installs

50+

Downloads

10,315

Requires WP

5.9+

Requires PHP

5.6+

Created

2023-03-19 (4y ago)

Hello FSE Multipurpose WordPress theme is a versatile and flexible theme that can be used to create various types of websites, such as business websites, portfolios, blogs, e-commerce store, and more. It offers a range of features and customization options, allowing you to create a unique and professional-looking website without 1 line of code or design skills.