Approved changes feed: RSS · Atom

cpe:2.3:a:pencidesign:pennews:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPencidesign (014d8474-b95d-55a1-bf73-aaaad687f842)
ProductPennews (fc260e9f-4e50-54f7-9979-33391d20030b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67572 vulnerable 2026-06-03 15:11:01.840084 WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a through < 6.7.4.
Published: 2025-12-09T14:14:13.153Z
Updated: 2026-04-28T19:23:58.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64223 vulnerable 2026-06-03 15:09:37.511420 WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability
HIGH (8.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign PenNews pennews allows PHP Local File Inclusion.This issue affects PenNews: from n/a through < 6.7.3.
Published: 2025-12-18T07:22:13.068Z
Updated: 2026-04-28T18:26:14.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.