Read the docs

deothemes

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

deothemes records in CISA KEV

No deothemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Arendelle 2 records LOW Everse 2 records LOW Nokke 2 records LOW Amela 1 record LOW Medikaid 1 record LOW

Records

5 records

TI-2026-25010 CVE-2026-32482 · GHSA-8x7j-66jm-5vq5

WordPress Ona theme < 1.24 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in deothemes Ona ona allows Upload a Web Shell to a Web Server.This issue affects Ona: from n/a through < 1.24.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00331 Published 2026-03-25 No fix listed CWE-434
TI-2023-02635 CVE-2023-2813 · GHSA-8mw6-p3x4-67qj

Multiple Themes - Reflected XSS

Priority LOW 29

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01011 Published 2023-09-04 Fixed in 1.1.13, 1.8.6 +19
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Priority LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862
Open these records in search →