Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

tagdiv / newspaper CVEs

Beta · best-effort

6 CVEs tagged to tagdiv / newspaper — 2 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to tagdiv vendor archive

CVE-2024-3815

Published Jun 15, 2024

The Newspaper theme for WordPress is vulnerable to Stored Cross-Site Scripting via attachment meta in the archive page in all versions up to, and including, 12.6.5 due to insuffic…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-2627

Published Oct 31, 2022

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scriptin…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-2167

Published Oct 31, 2022

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-3135

Published Jul 19, 2021

An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php td_block_id parameter in a td_ajax_block API call.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2016-10972

Published Sep 16, 2019

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.

CVSS 9.8 · Critical

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2017-18634

Published Sep 16, 2019

The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-6 of 6 CVEsPage 1 of 1