Newsblogger

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-1305 May 01, 04:16 HIGH PATCH This Week

The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

PHP WordPress RCE CSRF Newsblogger +2

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2025-1304 May 01, 04:16 HIGH This Week

The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the newsblogger_install_and_activate_plugin() function in all versions up to, and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass RCE Newsblogger +2

NVD

CVSS 3.1

8.8

EPSS

1.5%

CVE-2025-1305

EPSS 0% CVSS 8.8

HIGH PATCH This Week

PHP WordPress RCE +4

NVD

CVE-2025-1304

EPSS 2% CVSS 8.8

HIGH This Week

PHP WordPress Authentication Bypass +4

NVD