Newspaper

Newspaper

Vulnerabilities:

8

Last Updated:

February 25, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2024-04-18
Title
Newspaper < 12.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Fixed in
Fixed in 12.6.6
CVSS
5.5 (medium)
Published
2022-10-24
Title
tagDiv Composer < 3.5 - Unauthenticated Account Takeover
Fixed in
Fixed in 12.1
CVSS
10.0 (critical)
Published
2022-10-10
Title
Newspaper < 12 - Reflected Cross-Site Scripting
Fixed in
Fixed in 12
CVSS
6.1 (medium)
Published
2022-10-10
Title
Newspaper < 12 - Reflected Cross-Site Scripting
Fixed in
Fixed in 12
CVSS
6.1 (medium)
Published
2021-06-30
Title
Newspaper < 11 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 11
CVSS
7.1 (high)
Published
2020-06-03
Title
Newspaper < 10.3.4 - Authenticated Reflected Cross-Site Scripting
Fixed in
Fixed in 10.3.4
CVSS
8.8 (high)
Published
2019-02-14
Title
Newspaper Theme < 9.5 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 9.5
CVSS
n/a
Published
2016-06-06
Title
Newspaper Theme 6.4–6.7.1 - Privilege Escalation
Fixed in
Fixed in 6.7.2
CVSS
9.8 (critical)