Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: deothemes Clear all filters
TI-2026-25010 CVE-2026-32482 · GHSA-8x7j-66jm-5vq5

WordPress Ona theme < 1.24 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in deothemes Ona ona allows Upload a Web Shell to a Web Server.This issue affects Ona: from n/a through < 1.24.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00331 Published 2026-03-25 No fix listed CWE-434
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Priority LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862
TI-2023-02635 CVE-2023-2813 · GHSA-8mw6-p3x4-67qj

Multiple Themes - Reflected XSS

Priority LOW 29

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01011 Published 2023-09-04 Fixed in 1.1.13, 1.8.6 +19