newsmag vulnerabilities and fixes
Recent CVEs affecting newsmag, with upgrade or downgrade steps. 2 tracked.
newsmag has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-05-08. Highest priority: CVE-2022-3477 (score 67/100).
- CVE-2023-28493 MEDIUM 6.5 UPGRADE Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 v
- CVE-2022-3477 CRITICAL 9.8 UPGRADE UPGRADE The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and New
FAQ
How do I fix newsmag vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is newsmag being exploited right now?
None of the tracked newsmag CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which newsmag CVE should I patch first?
CVE-2022-3477 currently ranks highest (67/100): The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and New.