Lemmony

Lemmony has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Lemmony has a vendor fix available, so running the current release closes it.

All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). Lemmony is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Lemmony vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2026-32328

Lemmony < 1.7.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2026-02-08 00:00	Lemmony < 1.7.1 - Cross-Site Request Forgery Lemmony < 1.7.1	`CVE-2026-32328`	4.3 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes

Showing 1–1 of 1 reports

Latestv1.7.1

Lemmony

Author

shufflehound

5.0(14)

100/100

Last Updated

2026-02-09 (6mo ago)

Active Installs

1,000+

Downloads

44,558

Requires WP

6.1+

Requires PHP

7.0+

Created

2023-02-27 (4y ago)

Lemmony is a fast and lightweight WordPress theme that is optimized for speed. It comes with an added animation library that adds a touch of elegance to your website without slowing it down.The theme also includes multiple custom built block editor blocks, giving you greater flexibility and control over your website design. Lemmony is built on the new WordPress full site editing system, making it easy to customize and edit your website in real-time.This theme is perfect for those who want a fast and modern website without sacrificing design and functionality.