CyberSecBulletin

Newscred vulnerabilities

We track 1 vulnerability in Newscred products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Newscred vulnerabilities

  • 8.8 High severity

    Welcome Software Publishing: Missing Authorization

    CVE-2026-4297Newscred

    The Welcome Software Publishing plugin for WordPress is vulnerable to Arbitrary Options Update in all versions up to and including 0.0.31. This is due to a missing capability check in the nc_setOption() function, which is exposed via the nc.setOption XML-RPC m