wproyal Vulnerabilities and Affected Products
Vulnerabilities associated with News Magazine X.
Products
Clear product- Royal Addons for Elementor – Addons and Templates Kit for Elementor58 vulnerabilities
- royal_elementor_addons_and_templates6 vulnerabilities
- Ashe3 vulnerabilities
- Bard3 vulnerabilities
- News Magazine X2 vulnerabilities
- Royal Elementor Addons2 vulnerabilities
- Bard Extra1 vulnerability
- Royal Elementor Kit1 vulnerability
- Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely1 vulnerability
- royal_elementor_kit1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-24382HIGH | WordPress News Magazine X theme <= 1.2.50 - Broken Access Control vulnerabilityMissing Authorization vulnerability in wproyal News Magazine X news-magazine-x allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects News Magazine X: from n/a through <= 1.2.50. CWE-862Mar 25, 2026 | CVSS7.5v3.1 | EPSS0.278% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-24766HIGH | WordPress News Magazine X <= 1.2.35 - Local File Inclusion VulnerabilityImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wproyal News Magazine X news-magazine-x allows PHP Local File Inclusion.This issue affects News Magazine X: from n/a through <= 1.2.37. CWE-98Aug 14, 2025 | CVSS7.5v3.1 | EPSS0.447% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |