All products

ona

WordPress · Theme
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' ParameterCVE-2026-6812 ona WordPress Medium Fix reported
Ona < 1.24 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2026-32482 ona WordPress High Fix reported