WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
newscard
Published
2024-10-24
Title
NewsCard < 1.4 - Unauthenticated Local File Inclusion
Slug
newscrunch
Published
2025-03-03
Title
Newscrunch < 1.8.4.1 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
newscrunch
Published
2025-03-03
Title
Newscrunch < 1.8.4.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
newsdaily
Published
2024-12-19
Title
NewsDaily <= 1.0.64 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newseqo
Published
2025-03-24
Title
newseqo <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newshit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
newsmag
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
newsmag
Published
2023-03-16
Title
Newsmag <= 2.4.4 - Subscriber+ Reflected Cross-Site Scripting
Slug
newsmash
Published
2024-06-28
Title
NewsMash < 1.0.35 - Cross-Site Request Forgery to Notice Dismissal
Slug
newsmash
Published
2024-12-05
Title
NewsMash < 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsmatic
Published
2024-03-25
Title
Newsmatic < 1.3.5 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content
Slug
newsmatic
Published
2024-07-01
Title
Newsmatic < 1.3.3 - Missing Authorization
Slug
newsmunch
Published
2024-12-04
Title
NewsMunch < 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newspaper
Published
2024-04-18
Title
Newspaper < 12.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Slug
newspaper-x
Published
2020-10-01
Title
Multiple Themes - Unauthenticated Function Injection
Slug
newsup
Published
2025-10-10
Title
Newsup < 5.0.11 - Missing Authorization to Authenticated (Subscriber+) Plugin Installation
Slug
newsxpress
Published
2024-04-10
Title
NewsXpress < 1.0.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
newsy
Published
2025-04-01
Title
Multiple Themify Themes - Reflected Cross-Site Scripting
Slug
newsy
Published
2025-04-01
Title
Multiple Themify Themes - Contributor+ Arbitrary File Upload
Slug
nexos
Published
2019-09-08
Title
Nexos - Real Estate < 1.6.1 - SQL Injection & Persistent XSS
Slug
nexos
Published
2020-06-28
Title
Nexos - Real Estate < 1.8 - Unauthenticated Reflected XSS & SQL Injection
Slug
nexter
Published
2023-10-12
Title
Nexter < 2.0.4 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'
Slug
nexter
Published
2023-10-12
Title
Nexter < 2.0.4 - Missing Authorization
Slug
ngo-charity-lite
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify
Slug
nichebase
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius