Spicethemes Newsblogger
3 CVEs affecting Spicethemes Newsblogger. Latest disclosed: 2026-02-19. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12821 | High | 8.8 | 2026-02-19 | The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5.6 to 0.2.6.1. This is due to missing or incorrect nonce vali… |
CVE-2025-1305 | High | 8.8 | 2025-05-01 | The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4. This is due to missing or incorr… |
CVE-2025-1304 | High | 8.8 | 2025-05-01 | The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the newsblogger_install_and_activate_plugin()… |