blazethemes vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20255
3. 20269

Newest CVEs

• CVE-2026-120524

  News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action

  blazethemes · News Kit Addons For Elementor

  Medium6.4
• CVE-2026-118073

  WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

  blazethemes · News Kit Elementor Addons

  High8.8
• CVE-2026-110184

  Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter

  blazethemes · Newsmatic

  High7.5
• CVE-2026-11390

  News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets

  blazethemes · News Kit Addons For Elementor

  Medium6.4
• CVE-2026-25416

  WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability

  blazethemes · News Kit Elementor Addons

  Medium4.3
• CVE-2025-68910

  WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability

  blazethemes · Blogzee

  Critical9.9
• CVE-2025-68909

  WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability

  blazethemes · Blogistic

  Critical9.9
• CVE-2025-62056

  WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability

  blazethemes · News Event

  Critical9.9
• CVE-2025-62050

  WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability

  blazethemes · Blogmatic

  Critical9.9
• CVE-2025-13334

  Blaze Demo Importer 1.0.0 - 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion

  blazethemes · Blaze Demo Importer

  High8.1