theme
6 known security issues reported for the Mesmerize WordPress theme. Most recent disclosed Jan 2, 2025.
Running Mesmerize on your site? Check whether your installed version is affected.
Scan your site free[en] Cross-Site Request Forgery (CSRF) vulnerability in Horea Radu Mesmerize allows Cross Site Request Forgery.This issue affects Mesmerize: from n/a through 1.6.120.
The Mesmerize theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.120. This is due to missing or incorrect nonce validation on the after_setup_theme action. This makes it possible for unauthenticated attackers to clear the theme cache via a forged request granted they c...
[en] The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes...
The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes it p...
Authenticated Options Update vulnerability found by NinTechNet in WordPress Mesmerize theme (versions <=1.6.89).
Discovered by NinTechNet, both the Mesmerize and Materialis WordPress themes were affected by an authenticated options update vulnerability. This could allow a lower privileged user to update site options, which they should not be permitted to.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free