CVE-2019-17231

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

CVE-2019-17230

The OneTone theme for WordPress (versions 3.0.6 and earlier ) contains a security vulnerability in the includes/theme-functions.php file. This flaw allows unauthenticated attackers to perform unauthorized options changes , which can be used to modify site content such as 404 page messages to inje...

PT-2020-9884

Name of the Vulnerable Software and Affected Versions OneTone theme versions 3.0.6 and earlier for WordPress Description The issue allows unauthenticated options changes due to a problem in the includes/theme-functions.php file. Recommendations For OneTone theme versions 3.0.6 and earlier, update...

PT-2020-9885

Name of the Vulnerable Software and Affected Versions OneTone theme versions 3.0.6 and earlier for WordPress Description The issue concerns multiple stored XSS problems. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world...

CVE-2019-17230: Undefined Security Weakness

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

CVE-2019-17231: Improper Neutralization of Input During Web Page Generation

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

PT-2017-17905

Name of the Vulnerable Software and Affected Versions Spider Event Calendar plugin versions prior to 1.5.52 Description The issue is related to SQL injection in the Spider Event Calendar plugin for WordPress. It is exploitable through the order by parameter in files such as "calendar functions.ph...