Himalayas · Security record
Is Himalayas safe?
One known vulnerability affects the current version (1.3.6), and it has no fix yet.
Checked 3 days ago against the WPVulnerability database, for version 1.3.6.
How it’s looked after
- Last release
- Oct 6, 2026 (1 month ago)
- Releases in the last year
- 1
- Active installs
- 3K+
2 known vulnerabilities
- 2 medium
1 affects the current version. 1 has no fix yet.
Every known vulnerability in Himalayas
Newest first, with any that affect the current version at the top.
Affects the current version · No fix yet · CVE-2024-39629 · Jul 22, 2024 · Wordfence
Fixed in 1.3.1 · CVE-2024-34571 · May 7, 2024 · Wordfence
Questions about Himalayas’s security
Is Himalayas safe to use?
Yes: 1 known vulnerability affects version 1.3.6, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.
Does Himalayas have known security vulnerabilities?
Yes: 1 known vulnerability affects version 1.3.6, according to WPVulnerability’s database.
Is Himalayas still maintained?
Yes. Its last release was 1 month ago.
Hear about the next one first
Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.