Approved changes feed: RSS · Atom

cpe:2.3:a:apustheme:drone:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApustheme (c28e9189-f68c-56c5-b41f-66475fe703d5)
ProductDrone (57f88aea-b15c-54a1-8a0b-24cfe9d2b951)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49249 vulnerable 2026-06-03 15:01:44.330647 WordPress Drone theme <= 1.40 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Drone drone allows Reflected XSS.This issue affects Drone: from n/a through <= 1.40.
Published: 2026-01-22T16:51:42.924Z
Updated: 2026-04-28T16:12:58.958Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.