Idyllic
Idyllic has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Idyllic has a vendor fix available, so running the current release closes it.
All of these findings were reported by stealthcopter. Idyllic is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2024-35714Idyllic <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Idyllic
Author
Theme Freesia
Idyllic is the next generation and Ultra Responsive, Multipurpose, Corporated, Fully Optimized For Agency, Business, Corporate, CV, Personal, Portfolio, Fashion, Fitness, Financial, Ecommerce, Event, Services, SEO, Video and Blog or any other type of business WordPress theme, containing all the features you need to create a stunning website. The theme consists of well organized components so it’s easy to edit and customize everything to create a specific website for your needs. It is designed for Business but this is competent for every kind of site which is designed and developed by Theme Freesia. With a focus on business sites, it features multiple sections on the front page as well as widgets, multiple navigation and social menus, a logo, Color Options and more. This theme supports popular plugins like Breadcrumb NavXT, WP-PageNavi, Contact Form 7, Jetpack by WordPress.com, Polylang, bbPress, wooCommerce and many more. It is 100% translation ready and you can easily customize with lots of options using Customizer. It consists contact us template, gallery template,Corporate Template, widgets and Sidebar. Get free support at https://tickets.themefreesia.com/ and View demo site at https://themefreesia.com/demos/idyllic-demos/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C