Newsup

Newsup has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Newsup has a vendor fix available, so running the current release closes it.

All of these findings were reported by Dmitrii Ignatyev. Newsup is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Newsup vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-8682

Newsup <= 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Plugin Installation

Read the full analysis

Vulnerability Records

1 records


2025-10-10 00:00	Newsup <= 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Plugin Installation Newsup <= 5.0.10	`CVE-2025-8682`	4.3 Medium	Dmitrii Ignatyev	Yes

Showing 1–1 of 1 reports

Latestv5.5.9

Newsup

Author

themeansar

4.8(188)

96/100

Last Updated

2026-09-07 (6d ago)

Active Installs

20,000+

Downloads

3,045,568

Requires WP

6.7+

Requires PHP

7.4+

Created

2020-03-01 (7y ago)

Newsup is a fast, clean, modern-looking Best Responsive News Magazine WordPress theme. The theme is fully widgetized, so users can manage the content by using easy to use widgets. Newsup is suitable for dynamic news, newspapers, magazine, publishers, blogs, editors, online and gaming magazines, newsportals,personal blogs, newspaper, publishing or review siteand any creative website. Newsup is SEO friendly, WPML,Gutenberg, translation and RTL ready. Live preview : https://newsup.themeansar.com/lite and documentation at https://docs.themeansar.com/docs/newsup/