by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Admin Menu Editor (slug: admin-menu-editor) versions 1.14.1 and below are affected by a Medium-severity Cross-Site Request Forgery (CSRF) vulnerability tracked as CVE-2026-32456 (CVSS 4.3, vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). The...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Advanced Product Fields (Product Addons) for WooCommerce (slug: advanced-product-fields-for-woocommerce) is affected by CVE-2026-32457, rated Medium severity (CVSS 5.3). The issue can be reached over the network and does not require a logged-in user,...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-24373 is a Critical authentication bypass vulnerability (CVSS 9.8, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) affecting the WordPress plugin RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Mobile App Editor – WordPress to Android App Builder (slug: mobile-app-editor) has a High severity vulnerability (CVSS 7.2, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) tracked as CVE-2026-27067. Because it requires an authenticated user with...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-27054 is a Medium-severity (CVSS 6.1) Reflected Cross-Site Scripting (XSS) issue affecting the Penci Soledad Data Migrator WordPress plugin (penci-data-migrator) in versions up to and including 1.3.1. The primary attack path is social...
Recent Comments