PLUGIN SECURITY

Is Wp Dark Mode safe?

Enable dark mode on WordPress without any coding. Improve site accessibility with a stunning dark theme that improves conversion.

What this plugin does

  • Slug: wp-dark-mode
  • Author: WPPOOL
  • 20000+ active installs
  • 90/100 rating (390 reviews on wordpress.org)
  • 1448133 all-time downloads
  • On WordPress.org since 2020-07-20

accessibilitydarkdark modedark themeNight Mode

Maintenance status

  • Last updated: 2026-09-29 11:38am GMT
  • Tested up to WordPress: 7.1.3
  • Requires PHP: 5.6+

Known vulnerabilities

5 known CVEs on file for Wp Dark Mode. Reported between 2023 and 2024.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-5449 Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode] < 5.0.5 Missing Authorization Medium 4.3 < 5.0.5 5.0.5 2024-06-05 —
CVE-2026-93535 Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode] < 5.3.18 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.4 < 5.3.18 5.3.18 2024-06-05 —
CVE-2022-47150 Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode] < 3.0.5 Cross-Site Request Forgery (CSRF) Medium 4.3 < 3.0.5 3.0.5 2023-03-21 —
CVE-2023-0467 Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode] < 4.0.8 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium 4.3 < 4.0.8 4.0.8 2023-03-06 —
CVE-2022-4714 Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode] < 4.0.0 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.4 < 4.0.0 4.0.0 2023-01-30 —

How to fix it

Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.