What’s Vulnerable › Products

irmau IRM Newsroom vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your irmau IRM Newsroom version is affected

Latest irmau IRM Newsroom vulnerabilities

• CVE-2025-4586 — IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmcalendarview' Shortcode (CVSS 5.4)
• CVE-2025-4585 — IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmflat' Shortcode (CVSS 5.4)
• CVE-2025-4584 — IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmeventlist' Shortcode (CVSS 5.4)