📦 Newscrunch

The Newscrunch WordPress theme contains a vulnerability that allows authenticated users with Subscriber-level access or higher to upload arbitrary files to the server. This can lead to remote code exe...

This CSRF vulnerability in the Newscrunch WordPress theme allows unauthenticated attackers to upload arbitrary files by tricking administrators into clicking malicious links. All WordPress sites using...