Koji · Security record

Is Koji safe?

One known vulnerability affects the current version (2.2.3), and it has no fix yet.

Checked today against the WPVulnerability database, for version 2.2.3.

How it’s looked after

Last release: Nov 3, 2026 (5 days ago)
Releases in the last year: 4
Active installs: 1K+

1 known vulnerability

1 high

1 affects the current version. 1 has no fix yet.

Every known vulnerability in Koji

Newest first, with any that affect the current version at the top.

high
Missing Authorization
Affects the current version · No fix yet · CVE-2026-74020 · Aug 20, 2026 · Wordfence

Questions about Koji’s security

Is Koji safe to use?

Yes: 1 known vulnerability affects version 2.2.3, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.

Does Koji have known security vulnerabilities?

Yes: 1 known vulnerability affects version 2.2.3, according to WPVulnerability’s database.

Is Koji still maintained?

Yes. Its last release was 5 days ago.

Hear about the next one first

Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.

Start free

Vulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.