PLUGIN SECURITY
Is Options For Twenty Seventeen safe?
Adds powerful customizer options to modify all aspects of the default WordPress theme Twenty Seventeen.
What this plugin does
- Slug:
options-for-twenty-seventeen - Author: Oliver Campion
- 8000+ active installs
- 96/100 rating (57 reviews on wordpress.org)
- 366068 all-time downloads
- On WordPress.org since 2018-05-03
changecustomizemodifytwenty-seventeentwentyseventeen
Maintenance status
- Latest known version: 2.5.7
- Last updated: 2026-08-14 1:03pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Options For Twenty Seventeen. Reported between 2023 and 2023.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-5162 | Options for Twenty Seventeen [options-for-twenty-seventeen] < 2.5.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.5.1 | 2.5.1 | 2023-09-25 | ✓ fixed in latest |
How to fix it
Keep Options For Twenty Seventeen updated — 2.5.7 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Custom Product Tabs for WooCommerce — 80000+ active installs — 88/100 (163) — max PHP 8.4
- Remove Footer Credit — 70000+ active installs — 94/100 (88) — max PHP 8.4
- Theme My Login — 60000+ active installs — 74/100 (460) — max PHP 8.4
- Say What? — 40000+ active installs — 86/100 (92) — max PHP 8.4
- Login Logo — 40000+ active installs — 98/100 (62) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.