ZoxPress - The All-In-One WordPress News Theme vulnerabilities

2 known vulnerabilities in ZoxPress - The All-In-One WordPress News Theme from MVPThemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ZoxPress - The All-In-One WordPress News Theme: Missing Authorization

  CVE-2024-13654Feb 12, 2025MVPThemes

  The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' function in all versions up to, and includin

• 8.8 High severity

  ZoxPress - The All-In-One WordPress News Theme: Missing Authorization

  CVE-2024-13653Feb 12, 2025MVPThemes

  The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' functions in all ver