News Magazine X Vulnerabilities

The News Magazine X theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2.50. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.2.50

Fixed in:

1.2.51

Disclosed:

Mar 10, 2026

CVE-2026-24382 on NVD →

The News Magazine X theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.2.37. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access cont...

CVSS:

8.1

Affected:

up to 1.2.37

Fixed in:

1.2.38

Disclosed:

Jul 28, 2025

CVE-2025-24766 on NVD →