
OnePress · Security record
Is OnePress safe?
3 known vulnerabilities affect the current version (2.3.24), and they have no fix yet.
Checked 3 days ago against the WPVulnerability database, for version 2.3.24.
How it’s looked after
- Last release
- Nov 6, 2026 (2 days ago)
- Releases in the last year
- 9
- Active installs
- 50K+
4 known vulnerabilities
- 3 medium
- 1 not rated
3 affect the current version. 3 have no fix yet.
Disclosed each year
- 20242
- 20252
Every known vulnerability in OnePress
Newest first, with any that affect the current version at the top.
Affects the current version · No fix yet · CVE-2025-5092 · Nov 19, 2025 · Wordfence
- medium
Missing Authorization
Affects the current version · No fix yet · CVE-2025-22643 · Feb 3, 2025 · Wordfence
Affects the current version · No fix yet · CVE-2024-38739 · Jul 11, 2024 · Wordfence
Fixed in 2.3.7 · CVE-2024-37448 · Jun 28, 2024 · Wordfence
Questions about OnePress’s security
Is OnePress safe to use?
Yes: 3 known vulnerabilities affect version 2.3.24, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.
Does OnePress have known security vulnerabilities?
Yes: 3 known vulnerabilities affect version 2.3.24, according to WPVulnerability’s database.
Is OnePress still maintained?
Yes. Its last release was 2 days ago.
Hear about the next one first
Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.