Log in Start free

blazethemes

Products

ProductCVEsExploitedLatest
News Kit Elementor Addons5–Oct 29, 2026
Newsmatic3–Oct 29, 2026
News Kit Addons For Elementor3–Nov 3, 2026
Blaze Demo Importer2–Dec 12, 2025
Digital Newspaper1–Jun 21, 2024
News Event1–Jan 22, 2026
Pubnews1–Dec 6, 2024
Trendy News1–Jan 2, 2025
Blogistic1–Jan 22, 2026
Blogmatic1–Jan 22, 2026
Blogzee1–Jan 22, 2026

Exploited and recent CVEs

  • CVE-2026-120524 Medium 6.4 News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action 0.2%
  • CVE-2026-118073 High 8.8 WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-110184 High 7.5 Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter 0.4%
  • CVE-2026-11390 Medium 6.4 News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets 0.4%
  • CVE-2026-25416 Medium 4.3 WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68910 Critical 9.9 WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability 0.6%
  • CVE-2025-68909 Critical 9.9 WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability 0.6%
  • CVE-2025-62056 Critical 9.9 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2025-62050 Critical 9.9 WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2025-13334 High 8.1 Blaze Demo Importer 1.0.0 - 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion 0.3%
  • CVE-2025-8446 Medium 4.3 Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install 0.2%
  • CVE-2025-54037 Medium 5.4 WordPress News Kit Elementor Addons plugin <= 1.3.4 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-32196 Medium 6.5 WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-37473 Medium 4.3 WordPress Trendy News theme <= 1.0.15 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-54260 Medium 6.5 WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-10578 High 8.8 Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation 1.4%
  • CVE-2024-37468 Medium 5.3 WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability 0.4%
  • CVE-2024-9541 Medium 4.3 News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template 0.3%
  • CVE-2024-37198 Medium 4.3 WordPress Digital Newspaper theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-1587 Medium 5.3 Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content 0.6%