CVE-2024-3815中 4.8The Newspaper theme for WordPress is vulnerable to Stored Cross-Site Scripting via attachment meta in the archive page in all versions up to…
CVE-2022-2627中 6.1The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, lea…
CVE-2022-2167中 6.1The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, lea…
CVE-2021-3135中 6.1An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php td_block_id para…
CVE-2016-10972緊急 9.8The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.