Approved changes feed: RSS · Atom

cpe:2.3:a:https://themeforest.net/item/jnews-one-stop-solution-for-web-publishing/20566392:jnews_-_wordpress_newspaper_magazine_blog_amp_theme:*:*:*:*:*:*:*:*

part: a version: jnews_-_wordpress_newspaper_magazine_blog_amp_theme update: *

VendorHttps (d7181f43-5065-54de-83f7-090f042665aa)
Product//Themeforest.Net/Item/Jnews One Stop Solution For Web Publishing/20566392 (2a83c4c2-7aac-5dbf-89b7-21d5b3804f04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8682 vulnerable 2026-06-03 14:58:19.139425 JNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration
MEDIUM (5.3)
The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 11.6.6. This is due to the plugin not properly validate if the user can register option is enabled prior to creating a user though the register_handler() function. This makes it possible for unauthenticated attackers to register as a user even when user registration is disabled.
Published: 2025-03-05T08:21:55.244Z
Updated: 2026-04-08T16:50:54.967Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.