Vendor

    Blazethemes

    20 known vulnerabilities in products by Blazethemes, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Blazethemes
    HighCVE-2024-10578

    Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation

    		8.8
    HighCVE-2026-118073

    WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

    		8.8
    CriticalCVE-2025-68910

    WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability

    		9.9
    CriticalCVE-2025-68909

    WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability

    		9.9
    CriticalCVE-2025-62056

    WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability

    		9.9
    CriticalCVE-2025-62050

    WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability

    		9.9
    HighCVE-2026-110184

    Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter

    		7.5
    MediumCVE-2026-11390

    Blazethemes News Kit Addons For Elementor: Cross-site Scripting

    		6.4
    MediumCVE-2026-120524

    Blazethemes News Kit Addons For Elementor: Cross-site Scripting

    		6.4
    HighCVE-2025-13334

    Blazethemes Blaze Demo Importer: Missing Authorization

    		8.1
    MediumCVE-2025-32196

    WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-1587

    Blazethemes Newsmatic: Missing Authorization

    		5.3
    MediumCVE-2024-54260

    WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-37468

    WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-54037

    WordPress News Kit Elementor Addons plugin <= 1.3.4 - Broken Access Control Vulnerability

    		5.4
    MediumCVE-2026-25416

    WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2024-9541

    Blazethemes News Kit Addons For Elementor: Exposure of Sensitive Information to an Unauthorized Actor

    		4.3
    MediumCVE-2025-8446

    Blazethemes Blaze Demo Importer: Missing Authorization

    		4.3
    MediumCVE-2024-37473

    WordPress Trendy News theme <= 1.0.15 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3
    HighCVE-2024-37198

    WordPress Digital Newspaper theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3

    Products

    Products by Blazethemes
    News Kit Elementor Addons60
    News Kit Addons For Elementor30
    Newsmatic30