zBench

zBench has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for zBench has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

All of these findings were reported by stealthcopter. zBench is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 11 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all zBench vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-37521

zBench <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-07-05 00:00	zBench <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting zBench <= 1.4.2	`CVE-2024-37521`	6.4 Medium	stealthcopter	No

Showing 1–1 of 1 reports

Latestv1.4.2

zBench

Author

zwwooooo

4.5(2)

90/100

Last Updated

2014-09-23 (12y ago)

Active Installs

700+

Downloads

588,638

Requires WP

3.8.0+

Requires PHP

Created

2010-04-08 (17y ago)

It is a simple WordPress theme without any plugin needed (support plugin WP-PageNavi, WP Page Numbers, WP-PostViews, wp-utf8-excerpt, Related Posts of Simple Tags, WP-RecentComments), little images, custom-menu, widgets, threaded-comments. For WordPress version 3.0+