blazethemes vulnerabilities
20 published CVEs name blazethemes among the affected products.
- 20Published CVEs20 of them scored
- 10Last 12 monthspublished in the last year
- 4Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120524
News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action
blazethemes · News Kit Addons For Elementor
Medium6.4 - CVE-2026-118073
WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability
blazethemes · News Kit Elementor Addons
High8.8 - CVE-2026-110184
Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter
blazethemes · Newsmatic
High7.5 - CVE-2026-11390
News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets
blazethemes · News Kit Addons For Elementor
Medium6.4 - CVE-2026-25416
WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability
blazethemes · News Kit Elementor Addons
Medium4.3 - CVE-2025-68910
WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability
blazethemes · Blogzee
Critical9.9 - CVE-2025-68909
WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability
blazethemes · Blogistic
Critical9.9 - CVE-2025-62056
WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
blazethemes · News Event
Critical9.9 - CVE-2025-62050
WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability
blazethemes · Blogmatic
Critical9.9 - CVE-2025-13334
Blaze Demo Importer 1.0.0 - 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion
blazethemes · Blaze Demo Importer
High8.1