Skip to content
OpenAdvisories

Vendor

blazethemes

20 known vulnerabilities.

Products

News Kit Elementor Addons 5 News Kit Addons For Elementor 3 Newsmatic 3 Blaze Demo Importer 2 News Event 1 Digital Newspaper 1 Blogmatic 1 Pubnews 1 Trendy News 1 Blogistic 1 Blogzee 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-10578 Public exploit

    Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation

    The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for a…

    blazethemes Pubnews Web / CMS