Skip to content
OpenAdvisories

Vendor

silverks

3 known vulnerabilities.

Products

Graphene 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-17025

    Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Fields

    The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'Current location' and 'Author profile image URL' Profile Fields in all versions up to, and including, 2.9.4 due to insufficient input sanitization and output escaping. This mak…

    silverks Graphene Web / CMS
  • Medium 6.5
    CVE-2026-81281

    WordPress Graphene theme <= 2.9.4 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Graphene <= 2.9.4 versions.

    silverks Graphene
  • Medium 5.3
    CVE-2024-1984

    Graphene <= 2.9.2 - Missing Authorization

    The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generate…

    silverks Graphene Web / CMS