CVE Intelligence

PenciDesign PenNews vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting PenciDesign PenNews: 2 record(s), with affected versions and fixes.

CVE-2025-64223 High · 8.1 CWE-98 Dec 18, 2025
WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign PenNews pennews allows PHP Local File Inclusion.This issue affects PenNews: from n/a through < 6.7.3.
CVE-2025-67572 Medium · 5.3 CWE-862 Dec 9, 2025
WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a through < 6.7.4.