All products

onepress

WordPress · Theme
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OnePress <= 2.3.8 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-38739 onepress WordPress Medium Fix reported
OnePress <= 2.3.14 - Missing AuthorizationCVE-2025-22643 onepress WordPress Medium Fix reported
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript LibraryCVE-2025-5092 gallery-with-thumbnail-slideribtana-visual-editor WordPress Medium Fix reported
OnePress <= 2.3.6 - Cross-Site Request Forgery via save_settings()CVE-2024-37448 onepress WordPress Medium Fix reported