NewsMash
NewsMash has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for NewsMash has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. NewsMash is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2024-10849NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
NewsMash
Author
Desert Themes
NewsMash is a fast, clean, Best Responsive News Magazine WordPress theme. NewsMash is suitable for dynamic news, newspapers, magazine, publishers, blogs, editors, online and gaming magazines, newsportals,personal blogs, newspaper, publishing or review siteand any creative website. With its modern and clean design, NewsMash offers a visually appealing layout that is easy to navigate, making it ideal for delivering content to your readers. This theme comes equipped with a range of customizable options, custom widgets, and color schemes, allowing you to tailor your website to your specific needs and branding. It also supports various post formats, making it easy to present a variety of content types, from articles and videos to images and galleries. NewsMash is optimized for speed and SEO, ensuring that your website loads quickly and ranks well in search engine results. Its responsive design ensures that your content looks great on all devices, whether it's a desktop computer, tablet, or smartphone. NewsMash demos https://preview.desertthemes.com/newsmash/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C