Medium 6.1
2026-05-01< 3.4.11
CVE-2024-13362
Minimum safe version
4.0.1
Update to 4.0.1 or later to address 9 fixable vulnerabilities
CVE-2024-13362
CVE-2025-31082
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2023-5815
WordPress News & Blog Designer Pack – WordPress Blog Plugin Plugin < 3.4.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-4792
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress News & Blog Designer Pack – WordPress Blog Plugin plugin < 2.3.1 - Sensitive Information Disclosure vulnerability
WordPress News & Blog Designer Pack – WordPress Blog Plugin plugin < 2.3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability