Cream Magazine
Cream Magazine has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Cream Magazine has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by John P. Cream Magazine is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-24615Cream Magazine <= 2.1.10 - Missing Authorization
Read the full analysisVulnerability Records

Cream Magazine
Author
themebeez
Cream Magazine is a news & magazine WordPress theme with a clean & modern design suitable for everyone who wish to share their stories, publish a breaking daily news or write on different topics. Everything in Cream Magazine is very easy to deal with, after assigning a front-page one can fully get started to build a website though WordPress Live Customizer.Cream magazine is build taking SEO, Speed & Responsive in mind. Build-in features like lazy load for images has been implemented to make cream mag load faster & extra library files have been bundled to minimize HTTP requests. For more information go to https://themebeez.com/themes/cream-magazine/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C