ColorWay

Vulnerabilities 6Slug colorwayLatest version 4.2.3WordPress.org →

Minimum safe version

4.2.3

Update to 4.2.3 or later to address 3 fixable vulnerabilities

Latest available4.2.3 ✓⚠ 3 vulnerabilities have no fix
Medium 5.8 Unfixed
2025-12-31≤ 4.2.3

CVE-2025-59003

CVEWordfence
N/A Unfixed
≤ 4.2.3

Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify

WPScan
N/A
2022-02-14< 4.2.3

Multiple Themes (Various Versions) - Reflected Cross-Site Scripting

Wordfence
N/A
2016-07-26< 3.4.2

WordPress ColorWay Theme <= 3.4.1 - Cross Site Scripting

Patchstack