Hueman

Hueman has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (100%).

Every one of the 2 issues recorded for Hueman has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Hueman is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Hueman vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-35772

Hueman <= 3.7.24 - Cross-Site Request Forgery to Notice Dismissal

Read the full analysis

Vulnerability Records

2 records


2024-06-18 00:00	Hueman <= 3.7.24 - Cross-Site Request Forgery to Notice Dismissal Hueman <= 3.7.24	`CVE-2024-35772`	4.3 Medium	Dhabaleshwar Das	Yes
2020-09-26 00:00	Hueman <= 3.6.3 - Cross-Site Request Forgery Bypass Hueman <= 3.6.3	`CVE-2020-36753`	4.3 Medium	Jerome Bruandet	Yes

Showing 1–2 of 2 reports

Latestv3.7.27

Hueman

Author

presscustomizr

4.9(684)

98/100

Last Updated

2024-12-10 (2y ago)

Active Installs

20,000+

Downloads

3,082,137

Requires WP

Requires PHP

5.3+

Created

2013-11-16 (13y ago)

The Hueman theme loads fast and is 100% mobile-friendly according to Google. One of the best rated theme for blogs and magazines on WordPress.org. Powering 70K+ websites around the world.