Vayu X
Vayu X has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Vayu X has a vendor fix available, so running the current release closes it.
All of these findings were reported by Xanlar Agamalizade. Vayu X is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-88797Vayu X <= 1.0.5 - Missing Authorization
Read the full analysisVulnerability Records

Vayu X
Author
ThemeHunk
Vayu X is a Fast & lightweight Block Based Full Site Editing WordPress Theme. With FSE, users can create custom templates for different pages or sections of the site, as well as use widgets and other design elements to control the appearance and layout of the site. We believe it will revolutionize the way you create and customize your WordPress site. With Vayu X you’ll have access to a range of pre-designed templates and custom block patterns, making it easy to create stunning pages and posts without any coding knowledge.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C