ReviveNews
ReviveNews has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for ReviveNews has a vendor fix available, so running the current release closes it.
All of these findings were reported by Fariq Fadillah Gusti Insani (fariqfgi). ReviveNews is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 2 years, so new fixes are unlikely to arrive on their own.
CVE-2024-43974ReviveNews <= 1.0.2 - Missing Authorization via revivenews_install_and_activate_plugins()
Read the full analysisVulnerability Records
ReviveNews
Author
CozyThemes
Introducing ReviveNews – a cutting-edge, SEO friendly, block-based and FSE-compatible WordPress theme designed for news and magazines. With over 15 ready-made patterns and the Cozy Blocks plugin offering 20+ advanced blocks, ReviveNews empowers users to easily create dynamic and visually appealing websites. This theme is your go-to solution for a modern, user-friendly, and feature-rich online presence.ReviveNews is suitable for newspapers, magazine, news, publishers, blogs, blogger, editors, online magazines, newsportals,personal blogs, newspaper, publishing and any kinds of press website. Learn more about ReviveNews at https://cozythemes.com/revivenews-free-wordpress-theme-for-news-and-magazine/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C