Read the docs

famethemes

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

famethemes records in CISA KEV

No famethemes vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-04566 CVE-2025-5092 · GHSA-hvm5-wg42-9f5q

Cross-site scripting in lightgalleryteam LightGallery WP

Priority LOW 28

Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00256 Published 2025-11-20 No fix listed CWE-79
TI-2024-25973 CVE-2024-38739 · GHSA-43qr-7pjx-rp3v

WordPress OnePress theme <= 2.3.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 23

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in FameThemes OnePress allows Stored XSS.This issue affects OnePress: from n/a through 2.3.8.

CVSS 3.1MEDIUM 5.1 Network High privileges User interaction EPSS 0.00224 Published 2024-07-20 No fix listed CWE-79
TI-2025-16526 CVE-2025-22643 · GHSA-gx57-p235-fc52

WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through <= 2.3.11.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00265 Published 2025-02-04 No fix listed CWE-862
Open these records in search →