
Shapely · Security record
Is Shapely safe?
No known vulnerability affects the current version (1.3.7). 3 issues were found in earlier versions and fixed, the latest disclosed on Jun 7, 2023.
Checked 1 day ago against the WPVulnerability database, for version 1.3.7.
How it’s looked after
- Last release
- Oct 1, 2026 (1 month ago)
- Releases in the last year
- 8
- Active installs
- 10K+
3 known vulnerabilities
- 1 critical
- 2 not rated
None affects the current version.
Disclosed each year
- 20201
- 20231
Every known vulnerability in Shapely
Newest first, with any that affect the current version at the top.
- critical
Code Injection
Fixed in 1.2.9 · CVE-2020-36708 · Jun 7, 2023 · CVE
Fixed in 1.2.9 · Oct 1, 2020 · Patchstack
Fixed in 1.2.9 · WPScan
Questions about Shapely’s security
Is Shapely safe to use?
No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep Shapely updated: most attacks target sites that haven’t updated.
Does Shapely have known security vulnerabilities?
None that affect the current version. WPVulnerability’s database lists 3 older issues, fixed in earlier versions, so keep Shapely up to date.
Is Shapely still maintained?
Yes. Its last release was 1 month ago.
Hear about the next one first
Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.