What’s Vulnerable › Products

themegrill ColorMag vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your themegrill ColorMag version is affected

Latest themegrill ColorMag vulnerabilities

• CVE-2025-9202 — ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation (CVSS 4.3)
• CVE-2024-2500 — ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name (CVSS 6.4)
• CVE-2024-0679 — ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation (CVSS 6.5)