plugin

Ark Core Vulnerabilities

2 known security issues reported for the Ark Core WordPress plugin. Most recent disclosed Mar 3, 2025.

1 critical

Running Ark Core on your site? Check whether your installed version is affected.

Scan your site free

Ark Theme Core [ark-core] < 1.71.0

unknown

[en] Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Ark Theme Core ark-core allows Code Injection.This issue affects Ark Theme Core: from n/a before 1.71.0.

Affected:
up to 1.71.0
Fixed in:
1.71.0
Disclosed:
Mar 3, 2025

CVE-2025-26970 on NVD →

Ark Theme Core <= 1.70.0 - Unauthenticated Remote Code Execution

critical

The ark-core plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.70.0. This makes it possible for unauthenticated attackers to execute code on the server.

CVSS:
9.8
Affected:
up to 1.70.0
Fixed in:
1.71.0
Disclosed:
Feb 24, 2025

CVE-2025-26970 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database