4.3
Medium
CVE-2025-22643 Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through <= 2.3.11.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OnePress 2.3 | earliest → 2.3.11 | No fix stated |
Other CVEs of OnePress
The 4 CVEs of OnePress →
CVE-2025-5092
Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled…
6.4
Medium
CVE-2024-37448
Cross-Site Request Forgery (CSRF) vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This…
4.3
Medium
CVE-2024-38739
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
5.1
Medium