by Ivan Sorkin | Feb 13, 2026 | Plugins
Attack Vectors Press3D (slug: press3d) versions up to and including 1.0.2 contain a Medium-severity vulnerability (CVSS 6.4) tracked as CVE-2026-1985. The issue is a stored cross-site scripting (XSS) flaw that can be introduced through the WordPress Gutenberg 3D Model...
by Ivan Sorkin | Feb 13, 2026 | Plugins
Attack Vectors Smart Forms – when you need more than just a contact form (slug: smart-forms) has a Medium severity vulnerability (CVSS 4.3, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) that can be abused by an attacker who already has a valid WordPress login at the...
by Ivan Sorkin | Feb 13, 2026 | Plugins
Attack Vectors Product: User Language Switch (slug: user-language-switch) Severity: Medium (CVSS 4.4; CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) — CVE-2026-0735 (view CVE record). This issue is a Stored Cross-Site Scripting (XSS) vulnerability affecting User...
by Ivan Sorkin | Feb 13, 2026 | Plugins
Attack Vectors The WordPress plugin User Language Switch (slug: user-language-switch) is affected by a High-severity Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-0745, CVSS 7.2) in versions 1.6.10 and below. SSRF means an attacker can make your website’s...
by Ivan Sorkin | Feb 13, 2026 | Plugins
Attack Vectors Payment Page | Payment Form for Stripe (WordPress plugin slug: payment-page) has a Medium-severity vulnerability (CVSS 6.4) identified as CVE-2026-0751. It affects all versions up to and including 1.4.6. The attack requires an authenticated WordPress...
Recent Comments