Regina Lite Machothemes Regina Lite

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Machothemes Regina Lite.

By the Year

In 2026 there have been 0 vulnerabilities in Machothemes Regina Lite. Regina Lite did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 0 0.00
2023 3 7.23

It may take a day or so for new Regina Lite vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Machothemes Regina Lite Security Vulnerabilities

WP Themes <=1.3.1 Unauth Plugin Act/Deact (CVE-2020-36721)
CVE-2020-36721 6.5 - Medium - June 07, 2023

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.

AuthZ

WordPress Themes <=1.3.1 Function Injection via epsilon_framework_ajax_action
CVE-2020-36708 9.8 - Critical - June 07, 2023

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.

XSS in Macho Themes Regina Lite <=2.0.7 Reflected Vulnerability
CVE-2023-27619 5.4 - Medium - April 25, 2023

Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes Regina Lite theme <= 2.0.7 versions.

XSS

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Machothemes Regina Lite or by Machothemes? Click the Watch button to subscribe.

Machothemes
Vendor

subscribe