Graphene · Security record
Is Graphene safe?
One known vulnerability affects the current version (2.9.6), and it has no fix yet.
Checked 2 days ago against the WPVulnerability database, for version 2.9.6.
How it’s looked after
- Last release
- Aug 25, 2026 (2 months ago)
- Releases in the last year
- 1
- Active installs
- 10K+
3 known vulnerabilities
- 3 medium
1 affects the current version. 1 has no fix yet.
Disclosed each year
- 20242
- 20261
Every known vulnerability in Graphene
Newest first, with any that affect the current version at the top.
- medium
Missing Authorization
Affects the current version · No fix yet · CVE-2024-1984 · Mar 19, 2024 · Wordfence
Fixed in 2.9.6 · CVE-2026-17025 · Sep 2, 2026 · Wordfence
Fixed in 2.9.6 · CVE-2026-81281 · Mar 19, 2024 · Wordfence
Questions about Graphene’s security
Is Graphene safe to use?
Yes: 1 known vulnerability affects version 2.9.6, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.
Does Graphene have known security vulnerabilities?
Yes: 1 known vulnerability affects version 2.9.6, according to WPVulnerability’s database.
Is Graphene still maintained?
Yes. Its last release was 2 months ago.
Hear about the next one first
Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.