by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors Ecover Builder For Dummies (versions up to and including 1.0) has a Medium-severity stored cross-site scripting issue (CVE-2026-4077, CVSS 6.4). The attack path is straightforward: an authenticated WordPress user with Contributor-level access or higher...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors WP Random Button (slug: wp-random-button) has a Medium-severity Stored Cross-Site Scripting (XSS) vulnerability (CVSS 6.4) affecting versions 1.0 and earlier. The issue is tracked as CVE-2026-4086. This is an authenticated attack scenario: a user with...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors Quentn WP (WordPress plugin slug: quentn-wp) has a High-severity vulnerability (CVSS 7.5, CVE-2026-2468) that can be exploited by an unauthenticated attacker over the internet. The attack is carried out by manipulating a specific browser cookie named...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors Linksy Search and Replace (slug: linksy-search-and-replace) has a High severity vulnerability (CVSS 8.8, CVE-2026-2941) that can be exploited by an authenticated user with Subscriber-level access or higher. That means the risk is most relevant to...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors WP-Chatbot for Messenger (slug: wp-chatbot) is affected by CVE-2026-3506, a Medium severity issue (CVSS 5.3, vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N). Because the vulnerable action is reachable over the network and does not require...
Recent Comments