Total

Total has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 4.7, and the most serious one scores 5.4 out of 10.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for Total has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Total is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Total vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2026-5077

Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute

Read the full analysis

Vulnerability Records

3 records


2026-05-01 20:29	Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute Total <= 2.2.1	`CVE-2026-5077`	5.4 Medium	Osvaldo Noe Gonzalez Del Rio (Os)	Yes
2024-03-05 00:00	Total <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Update Total <= 2.1.59	`CVE-2024-1771`	4.3 Medium	Krzysztof Zając	Yes
2023-03-01 00:00	Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation Total <= 2.1.19	`CVE-2023-27456`	4.3 Medium	Dave Jong	Yes

Showing 1–3 of 3 reports

Latestv2.2.5

Total

Author

hashthemes

4.8(64)

96/100

Last Updated

2026-08-18 (26d ago)

Active Installs

30,000+

Downloads

1,258,510

Requires WP

Requires PHP

7.2+

Created

2016-10-04 (10y ago)

The Total WordPress Theme is a versatile, feature-rich, and fully responsive theme designed to help you create stunning websites effortlessly. With over 40,000 active installations, Total offers a clean and elegant design complemented by vibrant color options and parallax sections. Its homepage layout includes a slider, featured sections with icons, an about us section with progress bars, a masonry-style portfolio, team and testimonial sections, counters, a customizable blog section, client logo carousel, and a compelling call-to-action area. Built on the WordPress Customizer, Total allows real-time configuration with live previews, making customization intuitive and straightforward. The theme is SEO-friendly, cross-browser compatible, translation-ready, and seamlessly integrates with WooCommerce, enabling you to set up an online store with ease. It also supports major page builders like Elementor, WPBakery, SiteOrigin, and Beaver Builder, providing flexibility in designing your site. With a one-click demo import feature, you can quickly replicate the demo layout and customize it to fit your needs. Whether you're building a business website, portfolio, blog, or online store, Total provides all the essential tools and features to create a professional and engaging online presence. DEMO: https://hashthemes.com/wordpress-theme/total/