Every CVE whose affected-product data names Mageewp Onetone, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2019-17231 — CVSS 6.1 (medium): includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.
CVE-2019-17230 — CVSS 5.3 (medium): includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes.