A vulnerability marked as critical has been reported in wproyal News Magazine X Plugin up to 1.2.50 on WordPress. Impacted is an unknown function. Performing a manipulation results in missing authorization.

This vulnerability is cataloged as CVE-2026-24382. It is possible to initiate the attack remotely. There is no exploit available.