theme
3 known security issues reported for the Hashone WordPress theme. Most recent disclosed Mar 25, 2024.
Running Hashone on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0.
Several themes for WordPress are vulnerable to unauthorized modification of data due to a missing capability check on the activate_plugin() function called via an AJAX action in various versions. This makes it possible for authenticated attackers, with subscriber-level access and above, to activate arbitrary plugins.
Several themes for WordPress are vulnerable to Cross-Site Request Forgery due to missing nonce validation on the activate_plugin() function called via an AJAX action in various versions of the themes. This makes it possible for unauthenticated attackers to activate arbitrary plugins via a forged request, if they can tr...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free