Urna - All-in-one WooCommerce WordPress Theme

Urna - All-in-one WooCommerce WordPress Theme has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 4 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 3 of the records (75%). Other recurring categories include Cross-Site Scripting.

Every one of the 4 issues recorded for Urna - All-in-one WooCommerce WordPress Theme has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by João Pedro Soares de Alcântara.