news portal vulnerabilities and fixes

Recent CVEs affecting news portal, with upgrade or downgrade steps. 15 tracked.

Also searched as: newsportal.

news portal has 15 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-01-26. Highest priority: CVE-2025-69992 (score 59/100).

• CVE-2025-12616 LOW 3.7 DOWNGRADE A vulnerability was detected in PHPGurukul News Portal 1.0
• CVE-2025-12615 MEDIUM 5.0 DOWNGRADE A security vulnerability has been detected in PHPGurukul News Portal 1.0
• CVE-2026-1424 MEDIUM 4.7 DOWNGRADE A vulnerability was identified in PHPGurukul News Portal 1.0
• CVE-2026-1142 MEDIUM 4.3 DOWNGRADE A security flaw has been discovered in PHPGurukul News Portal 1.0
• CVE-2026-1141 MEDIUM 6.3 DOWNGRADE A vulnerability was identified in PHPGurukul News Portal 1.0
• CVE-2025-69992 CRITICAL 9.8 DOWNGRADE phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of
• CVE-2025-69991 CRITICAL 9.8 DOWNGRADE phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.
• CVE-2025-69990 CRITICAL 9.1 DOWNGRADE phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php
• CVE-2025-4880 HIGH 7.3 DOWNGRADE A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical
• CVE-2025-4874 HIGH 7.3 DOWNGRADE A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical
• CVE-2025-4873 HIGH 7.3 DOWNGRADE A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical
• CVE-2025-1859 HIGH 7.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1
• CVE-2021-37808 MEDIUM 5.9 DOWNGRADE SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2
• CVE-2006-2244 MEDIUM 6.4 MITIGATE Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary S
• CVE-2006-2243 MEDIUM 5.8 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject

FAQ

How do I fix news portal vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is news portal being exploited right now?

None of the tracked news portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which news portal CVE should I patch first?

CVE-2025-69992 currently ranks highest (59/100): phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of .

RSS feed for news portal · ← Back to latest CVEs