Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Theme security history

Allegiant Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with Allegiant, published between 2020 and 2024.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

2Total records
1Critical
0High
1Medium
0Low
0Informational
1Patched records
1Currently marked unpatched
2020-10-01First disclosure
2024-08-16Latest disclosure
2 of 2CVE coverage

Use this history

Check and watch Allegiant.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Year-by-Year Timeline

YearRecordsRelative volume
202011 records
202411 records

Severity Breakdown

SeverityRecordsShare
Critical150%
Medium150%

Vulnerability-Type Breakdown

Other

1 record50%

First: 2020. Latest: 2020.

Cross-Site Scripting

1 record50%

First: 2024. Latest: 2024.

Patch Status

Patched
1
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 1.2.6

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-1.2.7Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingAugust 16, 2024Not suppliedMedium
*-1.2.2Epsilon Framework Themes (Various Versions) - Function InjectionOctober 1, 20201.2.6Critical

Selected source records

Latest Records

MediumCVE-2024-43329

Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: August 16, 2024

Affected versions
*-1.2.7
Patched versions
Not supplied
Original Wordfence record
CriticalCVE-2020-36708

Epsilon Framework Themes (Various Versions) - Function Injection

Published: October 1, 2020

Affected versions
*-1.2.2
Patched versions
1.2.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-2.4.1
Patched versions
2.4.2
Affected versions
*-1.2.7
Patched versions
1.2.9
Affected versions
*-1.0.4
Patched versions
1.0.6
Affected versions
*-2.0.4
Patched versions
2.0.6
Affected versions
*-1.1.8
Patched versions
1.2.0
Affected versions
*-2.4.8
Patched versions
2.4.9
Affected versions
*-1.3.1
Patched versions
1.3.2
Affected versions
*-1.0.2
Patched versions
1.0.7
Affected versions
*-1.1.0
Patched versions
1.1.2
Affected versions
*-1.2.7
Patched versions
1.3.0
Affected versions
*-1.4.0
Patched versions
1.4.2
Affected versions
*-2.1.4
Patched versions
2.1.7
Affected versions
*-1.2.4
Patched versions
1.2.6
Affected versions
*-2.0.5
Patched versions
2.0.7
Original Wordfence record

Highest-Severity Records

CriticalCVE-2020-36708

Epsilon Framework Themes (Various Versions) - Function Injection

Published: October 1, 2020

Affected versions
*-1.2.2
Patched versions
1.2.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-2.4.1
Patched versions
2.4.2
Affected versions
*-1.2.7
Patched versions
1.2.9
Affected versions
*-1.0.4
Patched versions
1.0.6
Affected versions
*-2.0.4
Patched versions
2.0.6
Affected versions
*-1.1.8
Patched versions
1.2.0
Affected versions
*-2.4.8
Patched versions
2.4.9
Affected versions
*-1.3.1
Patched versions
1.3.2
Affected versions
*-1.0.2
Patched versions
1.0.7
Affected versions
*-1.1.0
Patched versions
1.1.2
Affected versions
*-1.2.7
Patched versions
1.3.0
Affected versions
*-1.4.0
Patched versions
1.4.2
Affected versions
*-2.1.4
Patched versions
2.1.7
Affected versions
*-1.2.4
Patched versions
1.2.6
Affected versions
*-2.0.5
Patched versions
2.0.7
Original Wordfence record
MediumCVE-2024-43329

Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: August 16, 2024

Affected versions
*-1.2.7
Patched versions
Not supplied
Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2024-43329

Allegiant <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: August 16, 2024

Affected versions
*-1.2.7
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory