[Diane Yorke]

Hello
I hope you are able to assist me. I have received the following notification from Jetpack that informs me that there is a vulnerability in relation to the Nivana (1.6.5) theme under the heading “Threat Found”. Are you able to let me know if you are aware of this issue and whether anything is being done to resolve it? I would be very grateful if you could provide me with any advice or recommendations.
Thanks so much in advance
Diane

Threat details
Vulnerable theme
Nirvana (1.6.5)
Low severityParent of active theme
What did Jetpack find?
The installed version of Nirvana (1.6.5) has known security vulnerabilities.
Nirvana <= 1.6.3 – Authenticated (Contributor+) Stored Cross-Site ScriptingLearn more
Nirvana <= 2.6 – Unauthenticated Local File InclusionLearn more
The technical details
Nirvana (1.6.5) is affected.
How to resolve or handle this detection?
Jetpack can’t fix this automatically. Review the affected code and remove it if you don’t recognize it, or contact Jetpack support for help.

[Author]

Posts