by Ivan Sorkin | Mar 19, 2026 | Plugins
Medium severity advisory (CVSS 5.3): RockPress (WordPress plugin slug: ft-rockpress) versions 1.0.17 and earlier are affected by CVE-2026-3550 due to missing authorization checks on multiple AJAX actions. CVE record: https://www.cve.org/CVERecord?id=CVE-2026-3550....
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-32451 is a Medium-severity missing authorization issue (CVSS 4.3) affecting the Avada (Fusion) Builder WordPress plugin (slug: fusion-builder) in versions earlier than 3.15.0. The practical attack path requires a user to already be logged into...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Avada (Fusion) Builder (slug: fusion-builder) is affected by a Medium severity vulnerability (CVSS 5.3) tracked as CVE-2026-32452. The CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) indicates the issue can be triggered remotely over the...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-32453 is a Medium-severity vulnerability (CVSS 3.1: 5.3, vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) affecting the Avada Core WordPress plugin (slug: fusion-core) in versions below 5.15.0. Because the issue is reachable over the...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-32454 is a Medium-severity stored cross-site scripting (XSS) issue (CVSS 6.4) affecting the Avada Core WordPress plugin (slug: fusion-core) in versions up to 5.15.0. The primary attack path requires an attacker to already have a WordPress login...
Recent Comments