Allegiant Vulnerabilities

The Allegiant theme for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wi...

CVSS:

6.4

Affected:

up to 1.2.7

Fix:

No patched version reported

Disclosed:

Aug 16, 2024

CVE-2024-43329 on NVD →

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <=...

CVSS:

9.8

Affected:

up to 1.2.2

Fixed in:

1.2.6

Disclosed:

Oct 1, 2020

CVE-2020-36708 on NVD →