spicethemes Newscrunch

• CVE-2025-1307 Critical 9.8 Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload 2.2%
• CVE-2025-1306 High 8.8 Newscrunch <= 1.8.4 - Cross-Site Request Forgery to Arbitrary File Upload 0.5%