Materialis

Materialis has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 2 of the records (100%).

Every one of the 2 issues recorded for Materialis has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Materialis is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSHigh

7.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Materialis vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2019-25142

Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update

Read the full analysis

Vulnerability Records

2 records


2024-06-19 00:00	Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update Materialis <= 1.1.24	`CVE-2023-3204`	6.5 Medium	Gibran Abdillah	Yes
2019-12-02 00:00	Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update Materialis <= 1.0.172	`CVE-2019-25142`	8.8 High	Jerome Bruandet	Yes

Showing 1–2 of 2 reports

Latestv1.1.67

Materialis

Author

Extend Themes

4.5(33)

90/100

Last Updated

2026-08-12 (1mo ago)

Active Installs

3,000+

Downloads

276,171

Requires WP

Requires PHP

5.6+

Created

2018-06-11 (8y ago)

Materialis is an incredibly flexible, multipurpose WordPress theme that can help you create an amazing website easier than ever, by drag and drop. It uses beautiful material design and it comes with a predesigned home page. It also has lots of customization options (video background, slideshow background, header content types, gradient overlays, etc) that will help you create a beautiful, unique website in no time. Materialis is responsive so it works on mobile devices out of the box.