17 matches found
WordPress OneTone theme <= 3.0.6 – Unauthenticated Stored XSS
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues. id: CVE-2019-17231 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Stored XSS author: daffainfo severity: medium description: | includes/theme-functions.php in the OneTone...
WordPress OneTone theme <= 3.0.6 – Unauthenticated Options Changes
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. id: CVE-2019-17230 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Options Changes author: daffainfo severity: medium description: | includes/theme-functions.php in...
EUVD-2019-7648
Malware in sbrugna...
CVE-2019-17231
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...
CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
OneTone Theme for WordPress Multiple Vulnerabilities
The WordPress OneTone Theme installed on the remote host is affected by an unauthenticated options import and stored Cross-Site Scripting XSS vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...
VulnCheck KEV: CVE-2019-17231
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...
VulnCheck KEV: CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
WordPress OneTone theme unauthorized operation vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.OneTone theme is a responsive website theme plugin used in it. A security vulnerability exists in the includes/theme-functions.php file...
CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
CVE-2019-17231
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...
CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
EUVD-2019-7647
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
CVE-2019-17230
The OneTone theme for WordPress (versions 3.0.6 and earlier ) contains a security vulnerability in the includes/theme-functions.php file. This flaw allows unauthenticated attackers to perform unauthorized options changes , which can be used to modify site content such as 404 page messages to inje...
CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
CVE-2019-17231
The OneTone theme for WordPress (versions 3.0.6 and earlier ) contains multiple stored Cross-Site Scripting (XSS) vulnerabilities within the includes/theme-functions.php file. The root cause is a lack of proper validation of client-side data by the web application. An unauthenticated attacker can...