Skip to content
OpenAdvisories

Product · blazethemes

Newsmatic

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-37468

    WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1.

    blazethemes Newsmatic
  • Medium 5.3
    CVE-2024-1587

    Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content

    The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmatic_filter_posts_load_tab_content'. This makes it possible for unauthenticated attackers to view draft posts and post …

    blazethemes Newsmatic Web / CMS