Skip to content
OpenAdvisories

Product · pressmaximum

Customify

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-8669

    Customify <= 0.4.11 - Cross-Site Request Forgery

    The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the reset_customize_section function. This makes it possible for unauthenticated attackers to reset theme …

    pressmaximum Customify Web / CMS
  • Medium 5.4
    CVE-2025-26920

    WordPress Customify theme <= 0.4.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in pressmaximum Customify customify-theme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customify: from n/a through <= 0.4.8.

    pressmaximum Customify