Advisories · Technology

famethemes OnePress.

Every CVE that names famethemes OnePress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-5092 CVE record

CVSS 6.4 Medium

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
- lightgalleryteam LightGallery WP
- tplugins TP WooCommerce Product Gallery
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025
CVE-2025-22643 CVE record

CVSS 4.3 Medium

WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability
- famethemes OnePress
- Broken access control
Not analysed yet 4 Feb 2025
CVE-2024-37448 CVE record

CVSS 4.3 Medium

WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability
- famethemes OnePress
- Cross-site request forgery (CSRF)
Not analysed yet 2 Jan 2025
CVE-2024-38739 CVE record

CVSS 5.1 Medium

WordPress OnePress theme <= 2.3.8 - Cross Site Scripting (XSS) vulnerability
- FameThemes OnePress
- Cross-site scripting (XSS)
Not analysed yet 20 Jul 2024