theme

Pont Vulnerabilities

1 known security issue reported for the Pont WordPress theme. Most recent disclosed Jun 26, 2015.

1 high

Running Pont on your site? Check whether your installed version is affected.

Pont <= 1.5 - Arbitrary Options Update

high

The Pont theme for WordPress is vulnerable to arbitrary option updates due to a missing capability check on the of_ajax_post_action AJAX action in versions up to, and including, 1.5. This makes it possible for unauthenticated attackers to edit arbitrary site options which can be used to create administrator accounts.

CVSS:: 8.8
Affected:: up to 1.5
Fix:: No patched version reported
Disclosed:: Jun 26, 2015

CVE-2015-9475 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database