by Ivan Sorkin | Mar 19, 2026 | Themes
Attack Vectors CVE-2026-24973 is a Medium-severity (CVSS 6.1) reflected cross-site scripting (XSS) issue affecting the Support for CitiLights – Real Estate WordPress Theme (slug: noo-citilights) in versions up to and including 3.7.1. Because this is a reflected...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Modern Events Calendar (WordPress plugin slug: modern-events-calendar) is affected by CVE-2026-32583, a Medium-severity authorization issue (CVSS 5.3). Because the weakness can be triggered over the network and does not require authentication, an...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors The Flexmls® IDX Plugin (slug: flexmls-idx) is affected by a Medium-severity reflected cross-site scripting (XSS) vulnerability (CVE-2026-25369, CVSS 6.1) in versions up to and including 3.15.9. Reflected XSS typically occurs when a crafted web request...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Product: Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits (slug: master-addons) Severity: Medium (CVSS 6.4) — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N This issue (CVE-2026-32462) is an...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CP Multi View Events Calendar (slug: cp-multi-view-calendar) versions up to and including 1.4.34 are affected by a Medium-severity Stored Cross-Site Scripting (XSS) vulnerability (CVE-2026-25465, CVSS 6.4; vector:...
Recent Comments