Skip to content
OpenAdvisories

Vendor

blazethemes

20 known vulnerabilities.

Products

News Kit Elementor Addons 5 News Kit Addons For Elementor 3 Newsmatic 3 Blaze Demo Importer 2 News Event 1 Digital Newspaper 1 Blogmatic 1 Pubnews 1 Trendy News 1 Blogistic 1 Blogzee 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-118073

    WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.

    blazethemes News Kit Elementor Addons
  • High 7.5
    CVE-2026-110184

    Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter

    The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer…

    blazethemes Newsmatic Web / CMS
  • High 8.1
    CVE-2025-13334

    Blaze Demo Importer 1.0.0 - 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion

    The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized database resets and file deletion due to a missing capability check on the "blaze_demo_importer_install_demo" function in all versions up to, and including, 1.0.13. This makes it possi…

    blazethemes Blaze Demo Importer Web / CMS
  • High 8.8
    CVE-2024-10578 Public exploit

    Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation

    The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for a…

    blazethemes Pubnews Web / CMS