Metro Magazine
Metro Magazine has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of August 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
Every one of the 2 issues recorded for Metro Magazine has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Metro Magazine is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-40809Metro Magazine <= 1.4.1 - Missing Authorization
Read the full analysisVulnerability Records

Metro Magazine
Author
Rara Themes
Metro Magazine is a modern responsive magazine style WordPress theme suitable for news, newspaper, magazine, sports, technology, food, travel, blogs, publishing, business and any kind of sites. The theme is built on Customizer and it allows you to easily customize your website with live previews. Metro Magazine includes color scheme and color for categories, which you can use to change the look and feel of your website with a click. The theme is Speed and Search Engine Optimized (SEO) to help you easily climb the google rank. Other feature includes social media integration, custom widgets, author bio, breadcrumb, advertisement settings, custom CSS, translation ready and more. Check demo at https://rarathemes.com/previews/?theme=metro-magazine and documentation at https://docs.rarathemes.com/docs/metro-magazine/. Read theme details at https://rarathemes.com/wordpress-themes/metro-magazine/ and get free support at https://rarathemes.com/support-ticket/.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C