Cream Blog

Cream Blog has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 1 is fixed and 1 remains unpatched as of August 2026. Their average CVSS score is 5.7, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. Cream Blog is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Cream Blog vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-39648

Cream Blog <= 2.1.7 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records


2026-02-15 00:00	Cream Blog <= 2.1.7 - Missing Authorization Cream Blog <= 2.1.7	`CVE-2026-39648`	5.3 Medium	Legion Hunter	No
2023-01-25 00:00	Cream Blog, Fascinate, Glaze Blog Lite, & Everest News (All Versions) - Cross-Site Scripting Cream Blog <= 2.1.3	`CVE-2023-28687`	6.1 Medium	László Radnai	Yes

Showing 1–2 of 2 reports

Latestv2.1.7

Cream Blog

Author

themebeez

3.5(2)

70/100

Last Updated

2025-04-18 (1y ago)

Active Installs

500+

Downloads

70,309

Requires WP

5.0+

Requires PHP

7.0+

Created

2018-11-05 (8y ago)

Cream Blog is 100% responsive, cross browser compatible, clean & trendy WordPress theme designed beautifully and developed with respect to WordPress standards. Cream blog fulfills the needs of those who want to build blog to publish online contents, write blog posts on travel, food, technology, fashion etc. Cream blog supports Woocommerce in case one is in need of setting up their own online store. Cream blog comes with tons of handy options that you can be trigged from WordPress live customizer. Build your blog with no hassale & let us know when you really need a hand by simply creating a support ticket from https://themebeez.com/support/.