by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors CVE-2026-27368 affects the WordPress plugin Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode (slug: coming-soon) in versions up to and including 6.19.8. The issue is rated Medium severity (CVSS 5.3)....
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript (slug: add-custom-codes) versions 4.80 and below contain a medium-severity Cross-Site Request Forgery (CSRF) issue tracked as CVE-2025-62739 (CVSS 4.3). This attack does not...
by Ivan Sorkin | Mar 18, 2026 | Themes
Attack Vectors CVE-2025-60125 is a Medium-severity issue (CVSS 5.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) affecting the FoodBook WordPress theme (slug: foodbook) in versions 4.7.6 and below. It is described as an Unauthenticated Sensitive Information Exposure...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors CVE-2025-58001 is a Medium severity vulnerability (CVSS 6.4) affecting the Compact Archives WordPress plugin (compact-archives) in versions 4.1.0 and below. It is an authenticated Stored Cross-Site Scripting (XSS) issue, meaning an attacker must have a...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors Bonus for Woo (slug: bonus-for-woo) versions up to and including 7.6.6 are affected by an insufficient input validation issue (CVE-2025-58835) with a Medium severity rating (CVSS 5.3). Based on the published scoring vector (AV:N/AC:L/PR:N/UI:N), the...
Recent Comments