All packages
Armania vulnerabilities
3 known CVE vulnerabilities in Armania, translated and rated.
- CVE-2026-62092High
Unauthenticated Local File Inclusion (LFI) in Armania versions up to 1.4.8. Allows an attacker to read files from the server without authentication.
- CVE-2026-62091High
Unauthenticated Cross Site Scripting (XSS) in Armania versions up to 1.4.8. Allows an attacker to inject malicious scripts into a victim's browser.
- CVE-2026-39626Medium
The Armania theme for WordPress has a basic XSS vulnerability due to improper neutralization of script-related HTML tags. This affects versions up to and including 1.4.8.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS