Newscrunch

Newscrunch has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 9.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Newscrunch has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Newscrunch is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSCritical

9.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Newscrunch vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-1307

Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

2 records


2025-03-03 15:46	Newscrunch <= 1.8.4 - Cross-Site Request Forgery to Arbitrary File Upload Newscrunch <= 1.8.4	`CVE-2025-1306`	8.8 High	Gibran Abdillah	Yes
2025-03-03 00:00	Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload Newscrunch <= 1.8.4	`CVE-2025-1307`	9.8 Critical	Chloe Chamberland	Yes

Showing 1–2 of 2 reports

Latestv1.8.6.8

Newscrunch

Author

spicethemes

4.3(12)

86/100

Last Updated

2026-09-01 (12d ago)

Active Installs

5,000+

Downloads

303,492

Requires WP

5.4+

Requires PHP

5.6+

Created

2023-07-04 (3y ago)

Newscrunch is a magazine and blog theme. It is a lightweight, elegant, and fully responsive theme specifically designed for creating magazines, newspapers, editors, blogs, and dynamic news websites. It seamlessly integrates with the Gutenberg block editor, empowering you to effortlessly build your website using intuitive blocks. The theme is highly compatible with popular plugins such as WooCommerce, Contact Form 7, Polylang, and WPML, offering expanded functionality. Newscrunch Theme prioritizes user privacy and complies with the General Data Protection Regulation (GDPR) guidelines by refraining from collecting any personal data restricted under GDPR. Additionally, all fonts used in the theme are locally hosted, eliminating the reliance on external resources like Google Fonts. The theme is also schema-ready, enhancing search engine visibility and optimization. With its GDPR compliance, sleek design, and efficient performance, Newscrunch Theme caters to various businesses. It provides a wide range of widgets and sections tailored to specific industries, enabling you to swiftly create a stunning website with beautiful designs. To explore the theme further, feel free to check out our demo at: https://demo-newscrunch.spicethemes.com/demo-one/. For video tutorial visit here https://www.youtube.com/playlist?list=PLTfjrb24Pq_DeJOZdKEaP3rZPbHuOCLtZ