Shuttle

Shuttle has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Shuttle has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Peter Thaleikis. Shuttle is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Shuttle vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-62137

Shuttle <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-12-31 00:00	Shuttle <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Shuttle <= 1.5.0	`CVE-2025-62137`	6.4 Medium	Peter Thaleikis	No

Showing 1–1 of 1 reports

Latestv1.6.0

Shuttle

Author

shuttlethemes

1.4(9)

28/100

Last Updated

2026-05-08 (4mo ago)

Active Installs

900+

Downloads

586,691

Requires WP

5.0+

Requires PHP

5.6+

Created

2018-06-22 (8y ago)

Shuttle is the awesome free version of Shuttle Pro. It is really good for professionals. If you want to make a business, for big or small this theme is good for you. So if it is a restaurant, sport, medical, startup, corporate, business, ecommerce, portfolio, freelancers or any type of online agency or firm you will want to use this cool design. It had a multi-purpose design with widget areas in footer, so now even easy to make blog / news website which looks really clean and professional. The theme is responsive, WPML, Polylang, Retina ready, SEO friendly, and is a super design. Shuttle is fast and lightweight and can be used for any type of website, fully compatible with eCommerce plugins like WooCommerce an JigoShop. Whether you are building a website for yourself, your business or are a freelancer building websites for your cliente, Shuttle is the perfect choice. Plus if works with all the major page builders such as Elementor, Beaver Builder, Visual Composer, Divi, SiteOrigin and so much more!