All In One Slider Vulnerability (Medium) –

by | Feb 26, 2026 | Plugins

Attack Vectors The All In One Slider WordPress plugin (formerly known as All In One Carousel) is affected by a Medium-severity reflected cross-site scripting (XSS) vulnerability in versions up to and including 1.2.20 (CVSS 6.1, vector...

Exploit Scanner Vulnerability (High) –

by | Feb 26, 2026 | Plugins

Attack Vectors Exploit Scanner (WordPress plugin slug: exploit-scanner) has a High severity vulnerability (CVSS 7.5, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) affecting versions up to and including 1.3.3. The issue can be triggered remotely over the network...

o2s gallery Vulnerability (Medium) –

by | Feb 26, 2026 | Plugins

Attack Vectors The o2s gallery WordPress plugin (o2s-gallery) is affected by a Medium-severity reflected Cross-Site Scripting (XSS) vulnerability in versions 1.0 and earlier (CVSS 6.1, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). This issue can be triggered...

Toret Manager Vulnerability (High) – CVE-2026-0912

by | Feb 26, 2026 | Plugins

Attack Vectors Toret Manager (slug: toret-manager) versions 1.2.7 and below contain a High-severity vulnerability (CVE-2026-0912, CVSS 8.8) that can be exploited by any authenticated WordPress user with Subscriber access or higher. The practical risk is greatest for...