Famethemes vulnerabilities
5 vulnerabilities
Known vulnerabilities in Famethemes products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Onepress4 vulnerabilities
- Fametheme Demo Importer1 vulnerabilities
MediumCVE-2025-5092famethemes · onepress +15 moreMultiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript LibraryMultiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.26%MediumCVE-2025-22643famethemes · onepress +1 moreWordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerabilityMissing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through <= 2.3.11.EPSS0.27%MediumCVE-2024-37448famethemes · onepress +1 moreWordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This issue affects OnePress: from n/a through <= 2.3.6.EPSS0.19%MediumCVE-2024-38739famethemes · onepress +1 moreWordPress OnePress theme <= 2.3.8 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in FameThemes OnePress allows Stored XSS.This issue affects OnePress: from n/a through 2.3.8.EPSS0.22%MediumCVE-2024-33679famethemes · fametheme demo importer +1 moreWordPress FameTheme Demo Importer plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in FameThemes FameTheme Demo Importer.This issue affects FameTheme Demo Importer: from n/a through 1.1.5.EPSS0.18%