NewsMunch
NewsMunch has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for NewsMunch has a vendor fix available, so running the current release closes it.
All of these findings were reported by stealthcopter. NewsMunch is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2024-10848NewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

NewsMunch
Author
Desert Themes
NewsMunch is a fast, clean, Best Responsive News Magazine WordPress theme. NewsMunch is suitable for dynamic news, newspapers, magazine, publishers, blogs, editors, online and gaming magazines, newsportals,personal blogs, newspaper, publishing or review siteand any creative website. With its modern and clean design, NewsMunch offers a visually appealing layout that is easy to navigate, making it ideal for delivering content to your readers. This theme comes equipped with a range of customizable options, custom widgets, and color schemes, allowing you to tailor your website to your specific needs and branding. It also supports various post formats, making it easy to present a variety of content types, from articles and videos to images and galleries. NewsMunch is optimized for speed and SEO, ensuring that your website loads quickly and ranks well in search engine results. Its responsive design ensures that your content looks great on all devices, whether it's a desktop computer, tablet, or smartphone. NewsMunch demos https://preview.desertthemes.com/newsmunch/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C