Reflected XSS Vulnerability in THEWP Digital Solutions News Theme V8
CVE-2026-8167

6.1MEDIUM

Key Information:

Vendor: TheWP Digital Solutions
Status: News Theme V8
Vendor: CVE Published:; 28 July 2026

🔔 Create TheWP Digital Solutions Vulnerability Alert

What is CVE-2026-8167?

A reflected XSS vulnerability exists in THEWP Digital Solutions News Theme V8, which can be exploited through improper input handling during web page generation. This can allow attackers to execute arbitrary scripts in the context of users' browsers, potentially leading to harmful consequences. This vulnerability is present in all versions of News Theme V8 until the end of its support on June 16, 2026.

Affected Version(s)

News Theme V8 0 <= 16.06.2026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 28, 2026
Vulnerability Reserved
May 8, 2026

Credit

Mustafa BAKIR

CVE-2026-8167 Data

JSON