WordPress theme
Perfect Portfolio security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the theme or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All Perfect Portfolio vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.2.4Update to 1.2.5 | CVE-2026-32345 | |
| Medium4.3 | Cross-Site Request Forgery to Notice Dismissal ≤1.2.0Update to 1.2.1 | CVE-2024-37435 | |
| Medium6.1 | Reflected Cross-Site Scripting <1.2.3Update to 1.2.3 | — |
- Medium5.3Missing Authorization
≤1.2.4Update to 1.2.5
- Medium4.3Cross-Site Request Forgery to Notice Dismissal
≤1.2.0Update to 1.2.1
- Medium6.1Reflected Cross-Site Scripting
<1.2.3Update to 1.2.3
Perfect Portfolio: common questions
Does Perfect Portfolio have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Perfect Portfolio: 3 medium. At least one is not fixed in the latest version.
How do I check which version of Perfect Portfolio I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Perfect Portfolio vulnerability?
CVE-2026-32345, published Feb 11, 2026: Perfect Portfolio <= 1.2.4 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Perfect Portfolio vulnerability listed in CISA KEV?
No. None of the known Perfect Portfolio vulnerabilities is currently listed in the CISA KEV catalog.