Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Theme security history

Billey - Creative Portfolio & Agency Elementor WordPress Theme Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with Billey - Creative Portfolio & Agency Elementor WordPress Theme, published between 2025 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

2Total records
0Critical
2High
0Medium
0Low
0Informational
1Patched records
1Currently marked unpatched
2025-07-08First disclosure
2026-07-02Latest disclosure
2 of 2CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202511 records
202611 records

Severity Breakdown

SeverityRecordsShare
High2100%

Vulnerability-Type Breakdown

Other

2 records100%

First: 2025. Latest: 2026.

Patch Status

Patched
1
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 2.1.6

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-2.1.8Billey <= 2.1.8 - Authenticated (Contributor+) Local File InclusionJuly 2, 2026Not suppliedHigh
[*, 2.1.6)Billey < 2.1.6 - Unauthenticated Local File InclusionJuly 8, 20252.1.6High

Selected source records

Latest Records

HighCVE-2026-57790

Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion

Published: July 2, 2026

Affected versions
*-2.1.8
Patched versions
Not supplied
Original Wordfence record
HighCVE-2025-59558

Billey < 2.1.6 - Unauthenticated Local File Inclusion

Published: July 8, 2025

Affected versions
[*, 2.1.6)
Patched versions
2.1.6
Original Wordfence record

Highest-Severity Records

HighCVE-2025-59558

Billey < 2.1.6 - Unauthenticated Local File Inclusion

Published: July 8, 2025

Affected versions
[*, 2.1.6)
Patched versions
2.1.6
Original Wordfence record
HighCVE-2026-57790

Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion

Published: July 2, 2026

Affected versions
*-2.1.8
Patched versions
Not supplied
Original Wordfence record

Currently Marked Unpatched Records

HighCVE-2026-57790

Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion

Published: July 2, 2026

Affected versions
*-2.1.8
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory