WordPress theme
Total security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Total vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute ≤2.2.1Update to 2.2.2 | CVE-2026-5077 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Sections Update ≤2.1.59Update to 2.1.60 | CVE-2024-1771 | |
| Medium4.3 | Authenticated(Subscriber+) Plugin Activation ≤2.1.19Update to 2.1.20 | CVE-2023-27456 |
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute
≤2.2.1Update to 2.2.2
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Sections Update
≤2.1.59Update to 2.1.60
- Medium4.3Authenticated(Subscriber+) Plugin Activation
≤2.1.19Update to 2.1.20
Total: common questions
Does Total have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Total: 3 medium. None are known to affect version null.
How do I check which version of Total I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Total vulnerability?
CVE-2026-5077, published May 1, 2026: Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute. Severity: Medium (CVSS 5.4).
Is any Total vulnerability listed in CISA KEV?
No. None of the known Total vulnerabilities is currently listed in the CISA KEV catalog.