CVE-2019-17231

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

CVE-2019-17230

The CVE-2019-17230 vulnerability affects WordPress users of the OneTone theme up to version 3.0.6, where the file includes/theme-functions.php allows unauthenticated changes to theme options. This can enable unauthenticated attackers to modify site options (e.g., content or behavior) and is class...