Multiple Parallelus Themes - Reflected Cross-Site Scripting (XSS)

Multiple themes from the Parallelus vendor were affected by reflected Cross-Site Scripting issues: Unite closed - https://themeforest.net/item/unite-wordpress-business-magazine-theme/90959 / http://para.llel.us/themes/unite-wp/ Salutation -...

WordPress Traject Theme - XSS

This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...

Some WordPress Themes, Thousands of Sites Open to XSS Vulnerability

A number of WordPress themes being distributed by the developer Parallelus are vulnerable to cross-site scripting XSS attacks, reports said. Themes, bits of PHP and HTML code that alter the look and functionality of sites, are usually installed via WordPress’ dashboard tool or by FTP. According t...