Montezuma

Montezuma has one disclosed vulnerability in the WordSec catalog, all reported in 2013; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Montezuma has a vendor fix available, so running the current release closes it.

All of these findings were reported by Eugene Dokukin. Montezuma is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 11 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Montezuma vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Montezuma < 1.1.8 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2013-02-19 00:00	Montezuma < 1.1.8 - Cross-Site Scripting Montezuma < 1.1.8	`N/A`	6.1 Medium	Eugene Dokukin	Yes

Showing 1–1 of 1 reports

Latestv1.2.8

Montezuma

Author

bytesforall

4.7(70)

94/100

Last Updated

2015-05-30 (12y ago)

Active Installs

300+

Downloads

283,123

Requires WP

Requires PHP

Created

2012-09-13 (14y ago)

Montezuma is a responsive, customizable and search engine optimized HTML5 / CSS3 theme. Choose between responsive, flexible and static layouts. Edit or create new page templates online, without FTP uploads. Add custom widget areas everywhere. Colorbox slideshow for standard WP galleries, auto post thumbs, advanced excerpts, Google fonts, transparent color picker, import/export settings and more. This is the second theme from the author of the popular "Atahualpa" theme. Active community at forum.bytesforall.com.