theme

Pressroom Vulnerabilities

2 known security issues reported for the Pressroom WordPress theme. Most recent disclosed Jul 4, 2025.

1 medium

Running Pressroom on your site? Check whether your installed version is affected.

Scan your site free

Pressroom [pressroom] <= 6.9 (unfixed)

unknown

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Pressroom - News Magazine WordPress Theme allows Reflected XSS. This issue affects Pressroom - News Magazine WordPress Theme: from n/a through 6.9.

Affected:
up to 6.9
Fix:
No patched version reported
Disclosed:
Jul 4, 2025

CVE-2025-32311 on NVD →

Pressroom - News Magazine WordPress Theme <= 7.0 - Reflected Cross-Site Scripting

medium

The Pressroom - News Magazine WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 7.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute i...

CVSS:
6.1
Affected:
up to 7.0
Fixed in:
7.1
Disclosed:
Jun 26, 2025

CVE-2025-32311 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database