Cream Magazine

Cream Magazine has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Cream Magazine has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by John P. Cream Magazine is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Cream Magazine vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-24615

Cream Magazine <= 2.1.10 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Cream Magazine screenshot
Latestv2.1.12

Cream Magazine

themebeez

Author

themebeez

5.0(12)
100/100
Last Updated
2026-07-16 (2mo ago)
Active Installs
5,000+
Downloads
289,161
Requires WP
5.0.0+
Requires PHP
5.6+
Created
2019-03-11 (8y ago)

Cream Magazine is a news &amp; magazine WordPress theme with a clean &amp; modern design suitable for everyone who wish to share their stories, publish a breaking daily news or write on different topics. Everything in Cream Magazine is very easy to deal with, after assigning a front-page one can fully get started to build a website though WordPress Live Customizer.Cream magazine is build taking SEO, Speed &amp; Responsive in mind. Build-in features like lazy load for images has been implemented to make cream mag load faster &amp; extra library files have been bundled to minimize HTTP requests. For more information go to https://themebeez.com/themes/cream-magazine/

Tags
BlogNewsOne columnCustom logoCustom menuGrid layoutTwo columnsLeft sidebarCustom headerRight sidebarTheme optionsFooter widgetsFeatured imagesCustom backgroundThreaded commentsTranslation readyRTL language support

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C