Advisories · Technology
spicethemes NewsBlogger.
Every CVE that names spicethemes NewsBlogger among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
NewsBlogger <= 0.2.5.6 - 0.2.5.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation
- spicethemes NewsBlogger
- Cross-site request forgery (CSRF)
- CVSS 8.8 High
NewsBlogger <= 0.2.5.1 - Authenticated (Subscriber+) Arbitrary File Upload
- spicethemes NewsBlogger
- Broken access control
- CVSS 8.8 High
NewsBlogger <= 0.2.5.4 - Cross-Site Request Forgery to Arbitrary Plugin Installation
- spicethemes NewsBlogger
- Cross-site request forgery (CSRF)