WordPress security by component

ZoxPress - The All-In-One WordPress News Theme

Theme description

ZoxPress - The All-In-One WordPress News Theme is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 12, 2025; the highest CVE/CNA score is 8.8.

Theme slug: zoxpress

Latest vulnerability

CVE-2024-13654: ZoxPress - The All-In-One WordPress News Theme: A security weakness

ZoxPress - The All-In-One WordPress News Theme is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedFeb 12, 2025

Safe version guidanceSee mitigation notes

		Safe version
Feb 12, 2025	CVE-2024-13654 ZoxPress - The All-In-One WordPress News Theme: A security weakness ZoxPress - The All-In-One WordPress News Theme is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE8.1 NVDPending
Feb 12, 2025	CVE-2024-13653 ZoxPress - The All-In-One WordPress News Theme: Privilege escalation or authentication bypass ZoxPress - The All-In-One WordPress News Theme is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE8.8 NVDPending