Kathmag

Kathmag has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; none of them are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (100%).

None of the 2 issues recorded for Kathmag have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.

All of these findings were reported by Dave Jong. Kathmag is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 2 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Kathmag vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2023-32959

Multiple sparklewpthemes Themes (Various versions) - Cross-Site Request Forgery to Arbitrary Plugin Activation

Read the full analysis

Vulnerability Records

2 records


2023-05-16 00:00	Multiple sparklewpthemes Themes (Various versions) - Cross-Site Request Forgery to Arbitrary Plugin Activation Kathmag <= 1.0.6	`CVE-2023-32959`	5.3 Medium	Dave Jong	No
2023-05-16 00:00	Multiple sparklewpthemes Themes (Various versions) - Missing Authorization to Arbitrary Plugin Activation Kathmag <= 1.0.6	`CVE-2023-32959`	5.3 Medium	Dave Jong	No

Showing 1–2 of 2 reports

Latestv1.0.8

Kathmag

Author

Sparkle WP

0.0(0)

0/100

Last Updated

2024-03-14 (3y ago)

Active Installs

90+

Downloads

17,233

Requires WP

Requires PHP

5.6+

Created

2018-05-07 (9y ago)

Kathmag is a simple and clean, ultra-fast free WordPress Magazine theme, Kathmag is specially designed for magazine, News portal, Blog and digital content publishing websites. It is a modern theme with elegant and responsive design and is completely built on customizer, where allows you to customize theme settings & layout with live preview, especially in front page three different block/section which helps you to display post different style with different layout and easily re-ordering each and every post block section, by default includes 4+ custom widget with header advertisement widget area, which custom widget you can easily add in left or right sidebar widget area or footer widget area. kathmag also supports many more 3rd party plugins, compatible with Jetpack, Contact Form 7, AccessPress Social Share, AccessPress, page builder, WooCommerce, Social Counter and many more. Official Support Forum: Support Full Demo: http://demo.sparklewpthemes.com/kathmag/demos/ and Docs: http://docs.sparklewpthemes.com/kathmag