Skip to content
Blazethemes vulnerabilities
Newest
-
blazethemes news kit addons for elementor
News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action
CVE-2026-120524
6.4 Medium
-
blazethemes news kit elementor addons
WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability
CVE-2026-118073
8.8 High
-
blazethemes newsmatic
Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter
CVE-2026-110184
7.5 High
-
blazethemes news kit addons for elementor
News Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_form
CVE-2026-97353
5.4 Medium
-
blazethemes news kit addons for elementor
News Kit Addons For Elementor < 1.4.9 - Subscriber+ Plugin Installation and Activation via nekit_install_importer
CVE-2026-97352
4.3 Medium
-
blazethemes blaze demo importer
Blaze Demo Importer < 1.0.17 - Author+ Stored XSS via SVG Upload
CVE-2026-106933
6.8 Medium
-
blazethemes news kit addons for elementor
News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets
CVE-2026-11390
6.4 Medium
-
blazethemes news kit elementor addons
WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability
CVE-2026-25416
4.3 Medium
-
blazethemes blogzee
WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability
CVE-2025-68910
9.9 Critical
-
blazethemes blogistic
WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability
CVE-2025-68909
9.9 Critical
-
blazethemes news event
WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
CVE-2025-62056
9.9 Critical
-
blazethemes blogmatic
WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability
CVE-2025-62050
9.9 Critical
-
blazethemes blaze demo importer
Blaze Demo Importer 1.0.0 - 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion
CVE-2025-13334
8.1 High
-
blazethemes blaze demo importer
Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
CVE-2025-8446
4.3 Medium
-
blazethemes news kit elementor addons
WordPress News Kit Elementor Addons plugin <= 1.3.4 - Broken Access Control Vulnerability
CVE-2025-54037
5.4 Medium
-
blazethemes news kit elementor addons
WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32196
6.5 Medium
-
blazethemes trendy news
WordPress Trendy News theme <= 1.0.15 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37473
4.3 Medium
-
blazethemes news kit elementor addons
WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-54260
6.5 Medium
-
blazethemes pubnews
Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation
CVE-2024-10578
Public exploit
8.8 High
-
blazethemes newsmatic
WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability
CVE-2024-37468
5.3 Medium
-
blazethemes news kit elementor addons, news kit addons for elementor +1 more
News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template
CVE-2024-9541
4.3 Medium
-
blazethemes digital newspaper
WordPress Digital Newspaper theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37198
4.3 Medium
-
blazethemes newsmatic
Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content
CVE-2024-1587
5.3 Medium