Inspiro
Inspiro has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Inspiro has a vendor fix available, so running the current release closes it.
All of these findings were reported by Dmitrii Ignatyev. Inspiro is installed on roughly 60,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2025-8592Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Read the full analysisVulnerability Records

Inspiro
Author
WPZOOM
Inspiro is a fast, ultra-lightweight, and versatile WordPress theme for small businesses, creative professionals, photographers, and visual portfolios. Launch your website in minutes with 20+ ready-made starter sites for both Elementor and the WordPress Block Editor (Gutenberg), each designed for a specific niche — business, agency, portfolio, online store, or blog. Don't see a perfect fit? Describe your website and the new AI Demo Generator (included with the free Inspiro Starter Sites plugin) designs and builds a custom demo just for you — pages, photos, menu, and colors, ready in about two minutes and fully editable with native blocks. Inspiro is also a great Elementor theme: it fully supports the Elementor header and footer builder (Theme Builder) along with other popular page builders like Beaver Builder, so you can design every part of your site visually. Built-in WooCommerce integration makes it easy to open an online store, while unique fullscreen video backgrounds (YouTube, Vimeo, and self-hosted) are perfect for photography, video, and multimedia projects. Fully responsive, SEO-friendly, GDPR-compliant, and privacy-focused with no external Google Fonts, Inspiro loads lightning-fast and looks perfect on every device. Discover more powerful features in the Premium version: https://www.wpzoom.com/themes/inspiro/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C