WordPress security by component

News Flash

Theme description

News Flash is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 08, 2024; the highest CVE/CNA score is 7.2.

Theme slug: news-flash

Latest vulnerability

CVE-2024-7560: News Flash: Code execution

News Flash is affected by code execution. Exploitation requires at least editor-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedAug 08, 2024

Safe version guidanceSee mitigation notes

		Safe version
Aug 08, 2024	CVE-2024-7560 News Flash: Code execution News Flash is affected by code execution. Exploitation requires at least editor-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE7.2 NVDPending