Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-1587 EUVD-2024-17331GHSA-pp2r-p867-hj9h

Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content

Published Apr 9, 2024 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmatic_filter_posts_load_tab_content'. This makes it possible for unauthenticated attackers to view draft posts and post content.

Affected products

VendorProductAffectedFixed
blazethemes Newsmatic ≤ 1.3.4 —

References