Skip to content
OpenAdvisories

Vendor

deothemes

3 known vulnerabilities.

Products

Ona 2 Amela 1 MedikAid | Medical Health Care RTL WordPress Theme 1 Arendelle 1 Nokke 1 Everse 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-6812

    Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' Parameter

    The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme. This makes it possible for authenticated attackers, with administrator-level access and above, to make web re…

    deothemes Ona Web / CMS
  • Medium 6.1
    CVE-2023-3708

    Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting

    Several themes for WordPress by DeoThemes are vulnerable to Reflected Cross-Site Scripting via breadcrumbs in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…

    deothemes Arendelle Everse MedikAid | Medical Health Care RTL WordPress Theme Web / CMS