Skip to content
OpenAdvisories

Product · Themeansar

Newsup

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-8682

    Newsup <= 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Plugin Installation

    The Newsup theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the newsup_admin_info_install_plugin() function in all versions up to, and including, 5.0.10. This makes it possible for unauthenticated atta…

    Themeansar Newsup Web / CMS