NewsMag

NewsMag has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2023; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Authentication Bypass Using An Alternate Path Or Channel, Code Injection.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, most of them (2) reported by Truoc Phan. NewsMag is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 4 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSHigh

7.8/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all NewsMag vulnerabilities before they are exploited.

Most severe open issueCVSS 5.4CVE-2023-28493

Newsmag <= 2.4.4 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2023-03-16 00:00	Newsmag <= 2.4.4 - Reflected Cross-Site Scripting NewsMag <= 2.4.4	`CVE-2023-28493`	5.4 Medium	Brandon James Roldan (tomorrowisnew)	No
2022-10-24 00:00	tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation Newsmag - Newspaper & Magazine… <= 5.2.1	`CVE-2022-3477`	9.8 Critical	Truoc Phan	Yes
2021-07-12 00:00	Newsmag < 5.0 - Reflected Cross-Site Scripting Newsmag - Newspaper & Magazine… < 5.0	`CVE-2021-24304`	6.1 Medium	Truoc Phan	Yes
2020-10-01 00:00	Epsilon Framework Themes (Various Versions) - Function Injection NewsMag <= 2.4.1	`CVE-2020-36708`	9.8 Critical	Jerome Bruandet	Yes

Showing 1–4 of 4 reports

Latestv2.4.4

NewsMag

Author

Macho Themes

4.7(18)

94/100

Last Updated

2021-09-30 (5y ago)

Active Installs

8,000+

Downloads

346,625

Requires WP

Requires PHP

7.0+

Created

2014-09-12 (12y ago)

Newsmag is a clean and modern magazine, news or blog WordPress theme for magazines, news websites, blogs and others. It have 4 different blog page style. It is will make your website adaptable with any type of mobile devices. Your site will be adaptive when viewed on a smartphone or tablet. Fully Responsive, Customizable and Search Engine ( SEO ) Friendly Friendly WordPress Theme using Twitter Bootstrap 3, Microformats and Font Awesome icons. You can add Contact Form and Google Maps to contact page. You can also build custom front page to use 3 different block styles, post banner and slider as unlimited. The theme offers Widgetized Sidebar, four column Footer Widgets. You can add unlimted Widgets in each Sidebar and Footer Column. Theme Features: Advanced Custom Fields, Contact Form, Custom Front Page Settings, Custom Background Support, Custom Menu ( 3 Level on Header, 1 Level on footer ), Custom Colors, Google Fonts, Dynamic Widgets, Slider ( Responsive and Mobile Touch Friendly ), Featured Post Banner, Different Blog Page and Homepage Style, Redux Framework, Post Formats, Microformats, Responsive Video, Popular Posts Widgets. To learn more about the theme please go to the theme uri and read the documentation.