Cpothemes Allegiant
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Cpothemes Allegiant.
By the Year
In 2026 there have been 0 vulnerabilities in Cpothemes Allegiant. Allegiant did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 5.40 |
| 2023 | 2 | 8.15 |
It may take a day or so for new Allegiant vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Cpothemes Allegiant Security Vulnerabilities
WP Chill Allegiant Stored XSS in Allegiant 1.2.7 (CVE202443329)
CVE-2024-43329
5.4 - Medium
- August 18, 2024
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a through 1.2.7.
XSS
WP Themes <=1.3.1 Unauth Plugin Act/Deact (CVE-2020-36721)
CVE-2020-36721
6.5 - Medium
- June 07, 2023
The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.
AuthZ
WordPress Themes <=1.3.1 Function Injection via epsilon_framework_ajax_action
CVE-2020-36708
9.8 - Critical
- June 07, 2023
The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Cpothemes Allegiant or by Cpothemes? Click the Watch button to subscribe.
