by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2025-15473 affects the WordPress plugin Timetics – Appointment Booking Calendar & Scheduling System (slug: timetics) in versions below 1.0.52. Because the issue can be triggered without logging in (no account required), an external attacker can...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-24372 is a Medium-severity vulnerability (CVSS 5.3) affecting the Subscriptions for WooCommerce WordPress plugin (slug: subscriptions-for-woocommerce) in versions up to and including 1.8.10. Because the issue can be triggered by unauthenticated...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Severity: Critical (CVSS 9.8) — CVE-2026-4038 affects the WordPress plugin Aimogen Pro – All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit (all versions up to and including 2.7.5). Because the vulnerable pathway can be...
by Ivan Sorkin | Mar 19, 2026 | Themes
Attack Vectors CVE-2026-24971 affects the Search & Go – Directory WordPress Theme (slug: searchgo) in versions 2.8 and below. The primary attack vector is authenticated access: an attacker only needs a valid WordPress account with Subscriber-level privileges...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-32461 is a Medium-severity missing authorization issue (CVSS 4.3, vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) affecting the WordPress plugin Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) (slug:...
Recent Comments