Multiple Themes - Unauthenticated Function Injection

Jerome Bruandet, from nintechnet, discovered numerous themes affected by Unauthenticated Function Injection issues, due to the lack of capability and CSRF nonce checks in AJAX actions.

The naturemag-lite theme partially fixed the issues in v1.0.5, however it has been removed from the WordPress repository.

Three of the themes, Brilliance, Activello and Newspaper X were also affected by an Unauthenticated Plugin Activation/Deactivation issue.