Themes Vulnerabilities

News < 0.2 - XSS

Description

The News WordPress theme was affected by a XSS security vulnerability.

Affects Themes

news
Fixed in 0.2

References

CVE
CVE-2011-3851

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
35b7ad71-cd2c-476e-8f3a-35f54c9a9396

Timeline

Publicly Published
2011-09-27 (about 14 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2021-06-29
Title
WP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS)
Published
2024-11-20
Title
WPBakery Visual Composer WHMCS Elements < 1.0.4.1 - Contributor+ Stored XSS
Published
2021-12-21
Title
Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes
Published
2025-09-10
Title
Mixtape <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-05-07
Title
Easy PayPal Buy Now Button < 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting