News Magazine X
News Magazine X has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.
Every one of the 2 issues recorded for News Magazine X has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. News Magazine X is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2025-24766News Magazine X <= 1.2.37 - Unauthenticated Local File Inclusion
Read the full analysisVulnerability Records
News Magazine X
Author
WP Royal
Easy to use Personal and Multi-Author Free WordPress Blog Magazine Theme - Suitable for WordPress Beginners and for Professionals as Well. Perfect for bloggers, journalists, and online magazines, news, blogs, and magazine websites. The theme has built in Magazine Grid Widget, Classic Post Grid Widget, Featured Tabs widget, Featured Post Widget, Subscription (newsletter) Widget, Category List widget and many other widgets. You can place your ads anywhere on the website, including the header, footer, various homepage sections, and other pages as well. The theme also offers a Header Footer builder with a Menu Widget, Logo Widget, News Ticker Widget, Social Icons Widget, Search Widget, Dark Mode Switcher Widget, Weather Widget (PRO), Random Post Widget, Offcanvas Widget (side menu) Widget, Header Image and another widget to build eye catching headers and footers. Clean and Modern Responsive design will perfectly showcase your content on any device, even on tablet, mobile & retina displays. Very fast, Search engine optimized fast loading speed, and SEO optimization, compatibility with many popular plugins & of course translation ready, coded with best SEO practices. Complies with the General Data Protection Regulation (GDPR) guidelines by refraining from collecting any personal data restricted under GDPR. Works perfectly with all major drag-and-drop page builders like Elementor, Gutenberg, Brizy, Beaver Builder, Visual Composer, SiteOrigin, Divi. You just need to write and be awesome! TEMPLATE DEMO: https://news-magazine-x-free.wp-royal-themes.com/demo/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C