Hybrid

Hybrid has one disclosed vulnerability in the WordSec catalog, all reported in 2011; it is fixed as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 7.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Hybrid has a vendor fix available, so running the current release closes it.

All of these findings were reported by SiteWatch. Hybrid is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 13 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Hybrid vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.1CVE-2011-3853

Hybrid < 0.10 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2011-09-27 00:00	Hybrid < 0.10 - Cross-Site Scripting Hybrid < 0.10	`CVE-2011-3853`	7.1 High	SiteWatch	Yes

Showing 1–1 of 1 reports

Latestv1.2

Hybrid

Author

Justin Tadlock

4.0(4)

80/100

Last Updated

2013-01-09 (14y ago)

Active Installs

300+

Downloads

337,409

Requires WP

Requires PHP

Created

2008-11-18 (18y ago)

A user-friendly, search-engine optimized parent theme, featuring 15 custom page templates and multiple widget-ready areas, allowing you to create any type of site you want.