FFameThemes

Products

Exploited and recent CVEs

• CVE-2025-5092 Medium 6.4 Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library 0.3%
• CVE-2025-22643 Medium 4.3 WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability 0.3%
• CVE-2024-37448 Medium 4.3 WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-38739 Medium 5.1 WordPress OnePress theme <= 2.3.8 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-33679 Medium 4.3 WordPress FameTheme Demo Importer plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%