Customify · Security record

Is Customify safe?

One known vulnerability affects the current version (0.4.27), and it has no fix yet.

Checked 3 days ago against the WPVulnerability database, for version 0.4.27.

How it’s looked after

Last release: Sep 26, 2026 (1 month ago)
Releases in the last year: 14
Active installs: 30K+

2 known vulnerabilities

1 medium
1 not rated

1 affects the current version. 1 has no fix yet.

Every known vulnerability in Customify

Newest first, with any that affect the current version at the top.

medium
Missing Authorization
Affects the current version · No fix yet · CVE-2025-26920 · Apr 10, 2025 · Wordfence
Cross-Site Request Forgery
Fixed in 0.4.12 · CVE-2025-8669 · Oct 2, 2025 · Wordfence

Questions about Customify’s security

Is Customify safe to use?

Yes: 1 known vulnerability affects version 0.4.27, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.

Does Customify have known security vulnerabilities?

Yes: 1 known vulnerability affects version 0.4.27, according to WPVulnerability’s database.

Is Customify still maintained?

Yes. Its last release was 1 month ago.

Hear about the next one first

Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.

Start free

Vulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.