Vulnerabilities

TI-2020-18892 CVE-2020-36721 · GHSA-x6fw-c968-rf52

Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

LOW 37

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00971 Published 2023-06-07 No fix listed CWE-284

TI-2020-18879 CVE-2020-36708 · GHSA-48h4-c5mw-4h8j

Epsilon Framework Themes (Various Versions) - Function Injection

CRITICAL 85

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, P…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.65342 Published 2023-06-07 No fix listed CWE-94

TI-2022-22324 CVE-2022-45358 · GHSA-m6m9-fxf2-g8mf

WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

LOW 25

Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00393 Published 2023-04-13 No fix listed CWE-79

Vulnerabilities

Filters

Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

Epsilon Framework Themes (Various Versions) - Function Injection

WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)