Lucene search
K

17 matches found

Nuclei
Nuclei
added 16 hours ago11 views

WordPress OneTone theme <= 3.0.6 – Unauthenticated Stored XSS

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues. id: CVE-2019-17231 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Stored XSS author: daffainfo severity: medium description: | includes/theme-functions.php in the OneTone...

6.1CVSS6.2AI score0.00142EPSS
Exploits1References3
Nuclei
Nuclei
added 16 hours ago6 views

WordPress OneTone theme <= 3.0.6 – Unauthenticated Options Changes

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. id: CVE-2019-17230 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Options Changes author: daffainfo severity: medium description: | includes/theme-functions.php in...

5.3CVSS5.8AI score0.07516EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7648

Malware in sbrugna...

6.1CVSS6.2AI score0.00142EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:2 a.m.4 views

CVE-2019-17231

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

6.1CVSS6AI score0.00142EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:13 a.m.7 views

CVE-2019-17230

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

5.3CVSS7.1AI score0.07516EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2020/07/23 12:0 a.m.28 views

OneTone Theme for WordPress Multiple Vulnerabilities

The WordPress OneTone Theme installed on the remote host is affected by an unauthenticated options import and stored Cross-Site Scripting XSS vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

6.1CVSS6.4AI score0.07516EPSS
Exploits2References4
VulnCheck KEV
VulnCheck KEV
added 2020/04/15 12:0 a.m.2 views

VulnCheck KEV: CVE-2019-17230

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

5.3CVSS6AI score0.07516EPSS
Exploits1References1
VulnCheck KEV
VulnCheck KEV
added 2020/04/15 12:0 a.m.1 views

VulnCheck KEV: CVE-2019-17231

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

6.1CVSS6.4AI score0.00142EPSS
Exploits1References1
CNVD
CNVD
added 2020/04/07 12:0 a.m.3 views

WordPress OneTone theme unauthorized operation vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.OneTone theme is a responsive website theme plugin used in it. A security vulnerability exists in the includes/theme-functions.php file...

5.3CVSS6.6AI score0.07516EPSS
Exploits1
OSV
OSV
added 2020/04/03 3:15 p.m.0 views

CVE-2019-17231

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

6.1CVSS6.3AI score0.00142EPSS
Exploits1References1
NVD
NVD
added 2020/04/03 3:15 p.m.6 views

CVE-2019-17230

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

5.3CVSS5.5AI score0.07516EPSS
Exploits1References1
OSV
OSV
added 2020/04/03 3:15 p.m.2 views

CVE-2019-17230

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

5.3CVSS5.8AI score0.07516EPSS
Exploits1References1
EUVD
EUVD
added 2020/04/03 2:16 p.m.3 views

EUVD-2019-7647

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

5.3CVSS5.3AI score0.07516EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/04/03 2:16 p.m.12 views

CVE-2019-17230

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

5.5AI score0.07516EPSS
Exploits1References1
CVE
CVE
added 2020/04/03 2:16 p.m.133 views

CVE-2019-17230

The CVE-2019-17230 vulnerability affects WordPress users of the OneTone theme up to version 3.0.6, where the file includes/theme-functions.php allows unauthenticated changes to theme options. This can enable unauthenticated attackers to modify site options (e.g., content or behavior) and is class...

5.3CVSS5.4AI score0.07516EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2020/04/03 2:16 p.m.13 views

CVE-2019-17231

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

6.1AI score0.00142EPSS
Exploits1References1
CVE
CVE
added 2020/04/03 2:16 p.m.131 views

CVE-2019-17231

CVE-2019-17231 affects the WordPress OneTone theme (

6.1CVSS6AI score0.00142EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder