ON
Product
OnePress
4
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add OnePress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5092 | 6.4 | Nov 20 | Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library Affected: through 2.3.16 |
| CVE-2024-38739 | 5.1 | Jul 20 | WordPress OnePress theme <= 2.3.8 - Cross Site Scripting (XSS) vulnerability Affected: through 2.3.8 |
| CVE-2025-22643 | 4.3 | Feb 4 | WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability Affected: through 2.3.11 |
| CVE-2024-37448 | 4.3 | Jan 2 | WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 2.3.6 |
Showing 4