OnePress

Explore OnePress vulnerabilities across all versions. Currently tracking 4 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all OnePress vulnerabilities before they are exploited.

Vulnerability Records

4 records


2025-11-19 00:00	Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library OnePress <= 2.3.16	`CVE-2025-5092`	6.4 Medium	Webbernaut	No
2025-02-03 00:00	OnePress <= 2.3.14 - Missing Authorization OnePress <= 2.3.14	`CVE-2025-22643`	4.3 Medium	Fariq Fadillah Gusti Insani (fariqfgi)	Yes
2024-07-11 00:00	OnePress <= 2.3.8 - Authenticated (Author+) Stored Cross-Site Scripting OnePress <= 2.3.8	`CVE-2024-38739`	6.4 Medium	stealthcopter	Yes
2024-06-28 00:00	OnePress <= 2.3.6 - Cross-Site Request Forgery via save_settings() OnePress <= 2.3.6	`CVE-2024-37448`	4.3 Medium	Dhabaleshwar Das	Yes

Showing 1–4 of 4 reports

Latestv2.3.21

OnePress

Author

FameThemes

4.6(154)

92/100

Last Updated

2026-06-26 (1mo ago)

Active Installs

60,000+

Downloads

2,584,427

Requires WP

Requires PHP

7.4+

Created

2016-02-08 (11y ago)

OnePress is an outstanding creative and flexible WordPress one page theme well suited for business website, portfolio, digital agency, product showcase, freelancers and everyone else who appreciate good design. The theme overall is an elegant and classic one, a fine example of Bootstrap 4 WordPress theme which compatibility with latest version of WooCommerce. (Live preview : https://demos.famethemes.com/onepress)