theme
4 known security issues reported for the Capella WordPress theme. Most recent disclosed Aug 20, 2026.
Running Capella on your site? Check whether your installed version is affected.
Scan your site freeThe Capella | Restaurant WordPress theme for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.5.5. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to app...
The Capella | Restaurant WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.5.5. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those...
[en] Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through <= 2.5.5.
The Capella theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.5.5 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an ad...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free