Skip to content
OpenAdvisories

Product · WP Chill

Brilliance

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-28171

    WordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <= 1.3.1 versions.

    WP Chill Brilliance
  • Medium 6.5
    CVE-2020-36721

    Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

    The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/…

    WP Chill silkalns Activello Brilliance