Skip to content
OpenAdvisories

Vendor

Macho Themes

5 known vulnerabilities.

Products

Regina Lite 2 NewsMag 2 Antreas 1 NatureMag Lite 1 MedZone Lite 1 Decode 1 CPO Companion 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-33916

    WordPress CPO Companion plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MachoThemes CPO Companion allows Stored XSS.This issue affects CPO Companion: from n/a through 1.1.0.

    Macho Themes CPO Companion
  • Medium 4.3
    CVE-2024-31386

    Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Themes Decode, Wayneconnor Sliding Door, Out…

    jetmonsters Macho Themes marsian themeinwp
  • Medium 6.5
    CVE-2023-28493

    WordPress Newsmag Theme <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)

    Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 versions.

    Macho Themes NewsMag
  • Medium 5.4
    CVE-2023-27619

    WordPress Regina Lite Theme <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

    Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes Regina Lite theme <= 2.0.7 versions.

    Macho Themes Regina Lite