Macho Themes

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Macho Themes records in CISA KEV

No Macho Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Image Photo Gallery Final Tiles Grid 3 records LOW Newsmag 3 records CRITICAL Regina Lite 3 records CRITICAL Antreas 2 records CRITICAL Cpo Companion 2 records LOW Medzone Lite 2 records CRITICAL Naturemag Lite 2 records CRITICAL Strong Testimonials 1 record MEDIUM

Records

2 records in Medzone Lite · all components

TI-2020-18879 CVE-2020-36708 · GHSA-48h4-c5mw-4h8j

Epsilon Framework Themes (Various Versions) - Function Injection

CRITICAL 85

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, P…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.65342 Published 2023-06-07 No fix listed CWE-94

TI-2020-18892 CVE-2020-36721 · GHSA-x6fw-c968-rf52

Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

LOW 37

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00971 Published 2023-06-07 No fix listed CWE-284

Open these records in search →

Critical	1
High	0
Medium	11
Low	0
No CVSS	0