by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors Task Manager (WordPress plugin slug: task-manager) is reported as vulnerable in versions up to and including 3.0.2 to an arbitrary shortcode execution issue (severity: Medium, CVSS 6.5) tracked as CVE-2026-4004. According to the published advisory, an...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors Product: Outgrow (WordPress plugin, slug: outgrow) Vulnerability: CVE-2026-1889 (Severity: Medium, CVSS 6.4; Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) affecting Outgrow versions up to and including 2.1. This issue can be exploited by an...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors CVE-2026-4069 is a Medium-severity vulnerability (CVSS 6.1) affecting Alfie – Feed Plugin (slug: alfie-the-productfeedtool-wp-plugin) in versions up to and including 1.2.1. It combines Cross-Site Request Forgery (CSRF) with Stored Cross-Site Scripting...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors WordPress PayPal Donation (slug: wordpress-paypal-donation) has a Medium-severity stored cross-site scripting (XSS) vulnerability (CVSS 6.4) tracked as CVE-2026-4072. The issue affects all versions up to and including 1.01. The attack requires an...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors CVE-2026-3617 affects the WordPress plugin Paypal Shortcodes (slug: paypal-shortcodes) in versions up to and including 0.3. The issue is a Medium-severity stored cross-site scripting (XSS) vulnerability (CVSS 6.4) that requires an attacker to be an...
Recent Comments