by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors CVE-2026-24364 is a medium-severity missing-authorization issue (CVSS 4.3) affecting User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (WordPress plugin slug: wp-user-frontend) in versions up to and...
by Ivan Sorkin | Mar 19, 2026 | Themes
Attack Vectors CVE-2026-27084 is a High-severity vulnerability (CVSS 8.1) affecting the Buisson WordPress theme (slug: buisson) in versions up to and including 1.1.11. Details are published at the CVE record and in the original advisory. This issue is unauthenticated,...
by Ivan Sorkin | Mar 19, 2026 | Plugins
Attack Vectors tagDiv Composer (slug: td-composer) versions up to and including 5.4.2 are affected by a Reflected Cross-Site Scripting (XSS) vulnerability tracked as CVE-2025-50001. The issue is rated Medium severity with a CVSS 6.1...
by Ivan Sorkin | Mar 19, 2026 | Themes
Attack Vectors CVE-2026-27083 affects the Work & Travel Company – Youth Programs WordPress theme (slug: work-travel-company) in versions <= 1.2. The issue is rated High severity with a CVSS score of 8.1. This vulnerability can be targeted remotely over...
by Ivan Sorkin | Mar 19, 2026 | Themes
Attack Vectors Love Story (lovestory) theme for WordPress is affected by CVE-2026-27082, a High severity issue (CVSS 8.1) involving PHP deserialization of untrusted input. Because the vulnerability is unauthenticated, an attacker does not need a valid WordPress...
Recent Comments