← WordPress Vulnerabilities
WordPress security by component

Fish House

Fish House is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 23, 2025; the highest CVE/CNA score is 9.8.

Theme slug: fish-house

CVE-2025-31631: Fish House: Code execution

Fish House is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedMay 23, 2025
Safe version guidanceSee mitigation notes
Safe version
May 23, 2025 CVE-2025-31631
Fish House: Code execution
Fish House is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.8
NVDPending