9.9 Critical

CVE-2026-32482 Unrestricted Upload of File with Dangerous Type vulnerability in deothemes Ona ona allows Upload a Web Shell to a Web…

Description

Unrestricted Upload of File with Dangerous Type vulnerability in deothemes Ona ona allows Upload a Web Shell to a Web Server.This issue affects Ona: from n/a through < 1.24.

Affected products and versions

Product	Affected versions	Fixed in
Ona	Versions not published

The 2 CVEs of Ona →

CVE-2026-6812 The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26… 4.4 Medium

Do you use Ona?

Track this CVE Watch Ona Check my SBOMs

www.cveye.io/en/cve/CVE-2026-32482

Timeline

Published March 25, 2026
Last modified April 29, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2026-32482 Unrestricted Upload of File with Dangerous Type vulnerability in deothemes Ona ona allows Upload a Web Shell to a Web…

Description

Affected products and versions

Other CVEs of Ona