What’s Vulnerable › Products

infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News version is affected

Latest infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News vulnerabilities

• CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
• CVE-2025-31082 — WordPress News & Blog Designer Pack plugin <= 4.0 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2023-5815 — News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion (CVSS 9.8)
• CVE-2022-4792 — News & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)