PatchTheCVEonetone vulnerabilities and fixes
Recent CVEs affecting onetone, with upgrade or downgrade steps. 2 tracked.
onetone has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-04-03. Highest priority: CVE-2019-17230 (score 50/100).
- CVE-2019-17231 MEDIUM 6.1 UPGRADE includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.
- CVE-2019-17230 MEDIUM 5.3 UPGRADE includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options c
FAQ
How do I fix onetone vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is onetone being exploited right now?
None of the tracked onetone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which onetone CVE should I patch first?
CVE-2019-17230 currently ranks highest (50/100): includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options c.