Vendor

    Macho Themes

    11 known vulnerabilities in products by Macho Themes, 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Macho Themes
    CriticalCVE-2020-36708

    Epsilon Framework Themes (Various Versions) - Function Injection

    also in 4 other products

    		9.8
    MediumCVE-2020-36721

    Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

    also in 4 other products

    		6.5
    MediumCVE-2020-14962

    MachoThemes Image Photo Gallery Final Tiles Grid: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2022-4717

    Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode

    		5.4
    MediumCVE-2023-0162

    CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    		5.5
    MediumCVE-2022-0186

    Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting

    		5.4
    MediumCVE-2022-4837

    CPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode

    		5.4
    MediumCVE-2024-6261

    WPChill Image Photo Gallery Final Tiles Grid: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-28493

    WordPress Newsmag Theme <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2024-33916

    WordPress CPO Companion plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2023-27619

    WordPress Regina Lite Theme <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

    		5.4

    Products

    Products by Macho Themes
    Regina Lite40
    CPO Companion30
    Image Photo Gallery Final Tiles Grid30
    MedZone Lite30
    NatureMag Lite30
    NewsMag30