News Event
News Event has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).
The one issue recorded for News Event has a vendor fix available, so running the current release closes it.
All of these findings were reported by Denver Jackson. News Event is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2025-62056News Event <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Read the full analysisVulnerability Records

News Event
Author
blazethemes
News Event is an exceptional news theme designed to satisfy all your requirements. It is customizer-based as well as fully compatible with Elementor builder. News Event theme offers extensive customization options for the header, footer, inner pages, and any part of the website. You will greatly enjoy diving into its live customizer, which incorporates all WordPress possibilities, such as post query parameters, real-time preview, expanded typography, and extensive style modification options. With a top-notch and intuitive design, this theme gives your website a professional news/magazine appearance. It includes six news layouts that can be customized at a granular level and added to any section as many times as you want.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C