PatchTheCVEmageewp vulnerabilities
Recent CVEs affecting mageewp products. 2 tracked.
mageewp has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-04-03. Highest priority: CVE-2019-17230 (score 50/100).
- CVE-2019-17231 MEDIUM 6.1 UPGRADE includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.
- CVE-2019-17230 MEDIUM 5.3 UPGRADE includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options c
FAQ
How do I fix mageewp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mageewp being exploited right now?
None of the tracked mageewp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mageewp CVE should I patch first?
CVE-2019-17230 currently ranks highest (50/100): includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options c.