by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors Listeo-Core – Directory Plugin by Purethemes (slug: listeo-core) is affected by a Medium-severity Reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-25461, CVSS 6.1, vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) in versions up to...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-25455 is a medium-severity authorization issue (CVSS 4.3) affecting the WordPress plugin Product Slider, Product Grid, Product Masonry (slug: woocommerce-products-slider) in versions up to and including 1.13.60. The risk is primarily from...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-25452 is a High-severity vulnerability (CVSS 7.2, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) affecting the WordPress plugin Remoji – Post/Comment Reaction and Enhancement (slug: remoji) in versions up to and including 2.2. Because...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2025-15363 is a Medium-severity Stored Cross-Site Scripting (XSS) issue (CVSS 6.4) affecting Get Use APIs – JSON Content Importer (slug: json-content-importer) in versions prior to 2.0.10. The attack requires an authenticated WordPress account with...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-4136 is a Medium-severity unvalidated redirect vulnerability affecting the Membership Plugin – Restrict Content WordPress plugin (slug: restrict-content) in all versions up to and including 3.2.24. The issue can be triggered during the password...
Recent Comments