NE
Product
NewsBlogger
by spicethemes · last CVE Feb 19, 2026
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch

Add NewsBlogger to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-12821
8.8
0%
Feb 19
NewsBlogger <= 0.2.5.6 - 0.2.5.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Affected: 0.2.5.6 through 0.2.5.9
CVE-2025-1304
8.8
1%
May 1
NewsBlogger <= 0.2.5.1 - Authenticated (Subscriber+) Arbitrary File Upload
Affected: through 0.2.5.1
CVE-2025-1305
8.8
0%
May 1
NewsBlogger <= 0.2.5.4 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Affected: through 0.2.5.4
Showing 3