by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors WP Games Embed (slug: wp-games-embed) versions up to and including 0.1beta contain a Medium severity vulnerability (CVE-2026-3996, CVSS 6.4) that can be exploited by an authenticated user with at least Contributor permissions. The attack path is...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors CVE-2026-4084 is a Medium severity vulnerability (CVSS 6.4) affecting the WordPress plugin fyyd podcast shortcodes (slug: fyyd-podcast-shortcodes) in all versions up to and including 0.3.1. The issue is an authenticated Stored Cross-Site Scripting...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors CVE-2026-2375 is a Medium-severity privilege escalation issue (CVSS 6.5) affecting the WordPress plugin App Builder – Create Native Android & iOS Apps On The Flight (slug: app-builder) in all versions up to and including 5.5.10. An attacker does not...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors CVE-2026-4022 is a Medium-severity Stored Cross-Site Scripting (XSS) vulnerability (CVSS 6.4) affecting the WordPress plugin Show Posts list – Easy designs, filters and more (slug: show-posts-shortcodes) in versions <= 1.1.0. The issue occurs through...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors Product: Ad Short (slug: ad-short)Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting (XSS) via the [ad] shortcode client attributeSeverity: Medium (CVSS 6.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)CVE: CVE-2026-4067 This issue...
Recent Comments