Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-32191 EUVD-2025-9823GHSA-jghv-pxcx-vxw5

WordPress News Element Elementor Blog Magazine plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

Published Apr 4, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webangon News Element Elementor Blog Magazine news-element allows DOM-Based XSS.This issue affects News Element Elementor Blog Magazine: from n/a through <= 1.0.9.

Affected products

VendorProductAffectedFixed
webangon News Element Elementor Blog Magazine ≤ 1.0.9 —

References