Deothemes Ona

• CVE-2026-6812 Medium 4.4 Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' Parameter 0.2%
• CVE-2026-32482 Critical 9.9 WordPress Ona theme < 1.24 - Arbitrary File Upload vulnerability 0.3%