Skip to content
OpenAdvisories

Vendor

silkalns

5 known vulnerabilities.

Products

Activello 4 Newspaper X 2 Sparkling 2 Bonkers 1 Shapely 1 Pixova Lite 1 Illdy 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-13423

    Sparkling <= 2.4.9 - Missing Authorization to Unauthenticated Arbitrary Plugin Activation/Deactivation

    The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparkling_activate_plugin' and 'sparkling_deactivate_plugin' functions in versions up to, and including, 2.4.9. This makes…

    silkalns Sparkling Web / CMS
  • Medium 6.5
    CVE-2020-36721

    Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

    The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/…

    WP Chill silkalns Activello Brilliance
  • Medium 5.4
    CVE-2022-45849

    WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.

    silkalns Activello
  • Medium 5.4
    CVE-2022-45358

    WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.

    silkalns Activello