by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors CVE-2025-31526 is a medium-severity SQL Injection vulnerability (CVSS 6.5) affecting the Behance Portfolio Manager WordPress plugin (slug: portfolio-manager-powered-by-behance) in versions 1.7.5 and earlier. The attack requires a logged-in WordPress...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors The vulnerability in Behance Portfolio Manager (slug: portfolio-manager-powered-by-behance) affects versions up to and including 1.7.5 and is rated Medium severity (CVSS 4.9, vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). Exploitation requires...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors WP Hotel Booking (slug: wp-hotel-booking) versions ≤ 2.2.9 contain a High-severity Local File Inclusion vulnerability (CVE-2024-51582, CVSS 8.8). This issue can be exploited by an authenticated user with Contributor-level access or higher. From a...
by Ivan Sorkin | Mar 18, 2026 | Themes
Attack Vectors CVE-2024-37930 is a Medium-severity issue (CVSS 5.3) affecting the SmartMag WordPress theme (slug: smartmag-responsive-retina-wordpress-magazine) in versions below 10.1.0. The exposure occurs when log files are publicly accessible on the website....
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors CVE-2024-31115 is a Critical vulnerability (CVSS 10.0) affecting the Chauffeur Taxi Booking System for WordPress plugin (slug: chauffeur-booking-system) in versions 7.2 and earlier. Because the issue is unauthenticated, an external attacker can attempt...
Recent Comments