FA
Vendor
famethemes
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-5092 | ON OnePress famethemes | 6.4 | Nov 20 | Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library |
| CVE-2025-22643 | ON OnePress famethemes | 4.3 | Feb 4 | WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability |
| CVE-2024-37448 | ON OnePress famethemes | 4.3 | Jan 2 | WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-38739 | ON OnePress FameThemes | 5.1 | Jul 20 | WordPress OnePress theme <= 2.3.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-33679 | FD FameTheme Demo Importer FameThemes | 4.3 | Apr 26 | WordPress FameTheme Demo Importer plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability |
