BL
Vendor
blazethemes
20
CVEs
0
On KEV
2
New 30D
Products
NK8.8
News Kit Elementor Addons
blazethemes
6 CVEs0 on KEV1 new
NE7.5
Newsmatic
blazethemes
3 CVEs0 on KEV1 new
BD8.1
Blaze Demo Importer
blazethemes
2 CVEs0 on KEV0 new
NK6.4
News Kit Addons For Elementor
blazethemes
2 CVEs0 on KEV0 new
BL9.9
Blogistic
blazethemes
1 CVEs0 on KEV0 new
BL9.9
Blogmatic
blazethemes
1 CVEs0 on KEV0 new
BL9.9
Blogzee
blazethemes
1 CVEs0 on KEV0 new
DN8.8
Digital Newspaper
blazethemes
1 CVEs0 on KEV0 new
NE9.9
News Event
blazethemes
1 CVEs0 on KEV0 new
PU8.8
Pubnews
blazethemes
1 CVEs0 on KEV0 new
TN4.3
Trendy News
blazethemes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118073 New | NK News Kit Elementor Addons blazethemes | 8.8 | Oct 29 | WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability |
| CVE-2026-110184 New | NE Newsmatic blazethemes | 7.5 | Oct 29 | Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter |
| CVE-2026-11390 | NK News Kit Addons For Elementor blazethemes | 6.4 | Jul 14 | News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets |
| CVE-2026-25416 | NK News Kit Elementor Addons blazethemes | 4.3 | Feb 19 | WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability |
| CVE-2025-68910 | BL Blogzee blazethemes | 9.9 | Jan 22 | WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability |
| CVE-2025-68909 | BL Blogistic blazethemes | 9.9 | Jan 22 | WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability |
| CVE-2025-62056 | NE News Event blazethemes | 9.9 | Jan 22 | WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability |
| CVE-2025-62050 | BL Blogmatic blazethemes | 9.9 | Jan 22 | WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability |
| CVE-2025-13334 | BD Blaze Demo Importer blazethemes | 8.1 | Dec 12 | Blaze Demo Importer 1.0.0 - 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion |
| CVE-2025-8446 | BD Blaze Demo Importer blazethemes | 4.3 | Sep 16 | Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install |
| CVE-2025-54037 | NK News Kit Elementor Addons blazethemes | 5.4 | Jul 16 | WordPress News Kit Elementor Addons plugin <= 1.3.4 - Broken Access Control Vulnerability |
| CVE-2025-32196 | NK News Kit Elementor Addons blazethemes | 6.5 | Apr 4 | WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37473 | TN Trendy News blazethemes | 4.3 | Jan 2 | WordPress Trendy News theme <= 1.0.15 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-54260 | NK News Kit Elementor Addons blazethemes | 6.5 | Dec 9 | WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-10578 | PU Pubnews blazethemes | 8.8 | Dec 6 | Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation |
| CVE-2024-37468 | NE Newsmatic blazethemes | 5.3 | Nov 1 | WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability |
| CVE-2024-9541 | NK News Kit Addons For Elementor blazethemes | 4.3 | Oct 22 | News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template |
| CVE-2024-37198 | DN Digital Newspaper blazethemes | 8.8 | Jun 21 | WordPress Digital Newspaper theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-1587 | NE Newsmatic blazethemes | 5.3 | Apr 9 | Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content |