CVE-2026-8167

The News Theme V8 from THEWP Digital Solutions is vulnerable to a reflected cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability could allow attackers to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or session hijacking. Organizations using this theme should prioritize remediation before the vulnerability's end-of-life on June 16, 2026, to protect their users and data integrity.