Input validation vulnerability in 16 Epsilon Framework Themes

Twenty-one WordPress themes have a security vulnerability that allows unauthenticated attackers to run code on a website. This affects versions up to and including Shapely 1.2.7, NewsMag 2.4.1, Activello 1.4.0, Illdy 2.1.4, Allegiant 1.2.2, Newspaper X 1.3.1, Pixova Lite 2.0.5, Brilliance 1.2.7, MedZone Lite 1.2.4, Regina Lite 2.0.4, Transcend 1.1.8, Affluent 1.1.0, Bonkers 1.0.4, Antreas 1.0.2, Sparkling 2.4.8, and NatureMag Lite 1.0.4. This security vulnerability is due to a flaw in the epsilon_framework_ajax_action.