Newsmatic
Newsmatic has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
Every one of the 2 issues recorded for Newsmatic has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Newsmatic is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2024-37468Newsmatic <= 1.3.1 - Missing Authorization
Read the full analysisVulnerability Records

Newsmatic
Author
blazethemes
Newsmatic is complete solution for your news website with full Elementor compatibility. By integrating the News Kit Elementor Addons plugin on your site, you can now customize any part of the theme with the Elementor page builder. It is fast, features rich, customizer-based, and multipurpose free news theme. It is multilingual compatibility, gutenberg compatibility, elementor compatibility and can be integrated easily with newsletter/form plugins. This theme is schema ready, which makes it a favourite for search engines. Newsmatic Theme does not collect any kind of personal data restricted under GDPR, so you can sleep without any worry by using our theme on your website. Developed by dedicated developers, it has user friendly and easy to use advanced control fields like select2, react color picker, image selector, typography field and many more inside the theme. Check out our pre-build demos here: https://blazethemes.com/theme/newsmatic-free. Check out news elementor addons: https://wordpress.org/plugins/news-kit-elementor-addons/. Video Tutorial: https://www.youtube.com/watch?v=m9siCG4kqRc
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C