by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors Keep Backup Daily (WordPress plugin slug: keep-backup-daily) is affected by CVE-2026-3339, a Low severity issue (CVSS 2.7; vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N). The vulnerability is reachable through the plugin’s kbd_open_upload_dir AJAX...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors CVE-2026-3350 is a Medium-severity (CVSS 6.4) stored cross-site scripting (XSS) issue affecting Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI (WordPress plugin slug: alt-manager) in versions 1.8.2 and earlier. The...
by Ivan Sorkin | Mar 20, 2026 | Plugins
Attack Vectors CVE-2026-3584 is a Critical vulnerability (CVSS 9.8, vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) affecting the WordPress plugin Kali Forms — Contact Form & Drag-and-Drop Builder (slug: kali-forms) in versions up to and including 2.4.9. The...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-2421 is a Medium-severity vulnerability (CVSS 6.5) affecting the ilGhera Carta Docente for WooCommerce WordPress plugin (wc-carta-docente) in versions 1.5.0 and earlier. The issue can be exploited by an authenticated user with...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-2432 is a Medium severity (CVSS 4.4) stored cross-site scripting (XSS) issue affecting the WordPress plugin CM Custom Reports – Flexible reporting to track what matters most (slug: cm-custom-reports) in versions 1.2.7 and earlier. The attack...
Recent Comments