Ona

Ona has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of August 2026. Their average CVSS score is 6.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Server-Side Request Forgery (SSRF), Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for Ona has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Ona is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Ona vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-32482

Ona < 1.24 - Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records


2026-05-01 16:42	Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' Parameter Ona <= 1.26	`CVE-2026-6812`	4.4 Medium	Nguyen Truong (Roll)	Yes
2026-03-23 00:00	Ona < 1.24 - Authenticated (Subscriber+) Arbitrary File Upload Ona < 1.24	`CVE-2026-32482`	8.8 High	Phat RiO	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Ona 1.1 – 1.18.1	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes

Showing 1–3 of 3 reports

Latestv1.27

Ona

Author

DeoThemes

4.3(6)

86/100

Last Updated

2026-04-28 (4mo ago)

Active Installs

2,000+

Downloads

258,906

Requires WP

5.8+

Requires PHP

5.6+

Created

2021-11-03 (5y ago)

Ona is a Full Site Editing WordPress theme based on the minimal design style. It comes with many pre-defined block patterns and color scheme styles. Ona includes 18 child themes, 12 of them are free. Header and footer builder allows you easily edit your layout and choose pre-made elements. It's easy to customize colors and fonts via global options. This theme scores 98 on mobile and it is perfect for fast optimized websites that have an instant impact On Core Web Vitals performance. ★ Demo: https://ona.deothemes.com ★