theme

Cherryframework Vulnerabilities

1 known security issue reported for the Cherryframework WordPress theme. Most recent disclosed Jun 15, 2026.

1 high

Running Cherryframework on your site? Check whether your installed version is affected.

Cherry Framework <= 3.1.4 - Unauthenticated Backup Download

high

The Cherry Framework theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.4. This makes it possible for unauthenticated attackers to extract backups.

CVSS:: 7.5
Affected:: up to 3.1.4
Fix:: No patched version reported
Disclosed:: Jun 15, 2026

CVE-2018-25437 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database