ColorMag · Security record
Is ColorMag safe?
No known vulnerability affects the current version (4.2.7). 3 issues were found in earlier versions and fixed, the latest disclosed on Aug 19, 2025.
Checked 4 days ago against the WPVulnerability database, for version 4.2.7.
How it’s looked after
- Last release
- Nov 2, 2026 (1 week ago)
- Releases in the last year
- 9
- Active installs
- 40K+
3 known vulnerabilities
- 3 medium
None affects the current version.
Disclosed each year
- 20242
- 20251
Every known vulnerability in ColorMag
Newest first, with any that affect the current version at the top.
- medium
Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Fixed in 4.0.20 · CVE-2025-9202 · Aug 19, 2025 · Wordfence
Fixed in 3.1.7 · CVE-2024-2500 · Mar 21, 2024 · Wordfence
Fixed in 3.1.3 · CVE-2024-0679 · Jan 19, 2024 · Wordfence
Questions about ColorMag’s security
Is ColorMag safe to use?
No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep ColorMag updated: most attacks target sites that haven’t updated.
Does ColorMag have known security vulnerabilities?
None that affect the current version. WPVulnerability’s database lists 3 older issues, fixed in earlier versions, so keep ColorMag up to date.
Is ColorMag still maintained?
Yes. Its last release was 1 week ago.
Hear about the next one first
Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.