NewsExo

NewsExo has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for NewsExo has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). NewsExo is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all NewsExo vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-39618

NewsExo <= 7.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2026-02-11 00:00	NewsExo <= 7.1 - Cross-Site Request Forgery NewsExo <= 7.1	`CVE-2026-39618`	4.3 Medium	Trương Hữu Phúc (truonghuuphuc)	No

Showing 1–1 of 1 reports

Latestv8.7

NewsExo

Author

Theme Arile

5.0(5)

100/100

Last Updated

2026-08-10 (5d ago)

Active Installs

2,000+

Downloads

165,956

Requires WP

Requires PHP

5.6+

Created

2024-09-16 (2y ago)

NewsExo is a clean, stylish, and, powerful WordPress theme for News Blog & Magazine websites. It has a unique design for a visually stunning layout that makes your content displays beautiful and easy to read for any media device. Even it is user-friendly, SEO-ready, effortlessly, lightweight, and optimized for top performance and Core Web Vitals. The theme is best suitable for news, newspapers, magazines, publishers, editors, news portals, personal blogs, dynamic news, business blogs, news editorials, guides, journalism, lifestyle blogs, travel blogs, niche blog, food blog, fashion magazine, beauty blog, affiliate blog, multimedia blog, guest blogging and reviews websites. It also has flexible and versatile layouts enough for essential needs with unlimited colors, unlimited Google fonts, typography, responsive design, and Rtl language support. It is designed to be highly SEO-friendly that can help optimize your website on search engine performance, making it easier to find for potential visitors and the theme provides predefined beautiful demos that can be imported with one click in less time. NewsExo also supports popular free and premium WordPress plugins such as Elementor, Yoast SEO, WooCommerce, Gutenberg, Contact Form 7, Jetpack, Google Analytics, and much more. Check the demo of NewsExo Pro https://newsexo-pro.themearile.com/.