by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors CVE-2024-31106 is a Medium-severity reflected cross-site scripting (XSS) vulnerability (CVSS 6.1) affecting the Yoo Slider – Image Slider & Video Slider WordPress plugin (yoo-slider) in versions up to and including 2.1.1. This issue can be exploited...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors This Medium-severity vulnerability (CVSS 6.5) affects the Booked – Appointment Booking for WordPress plugin (slug: booked) in versions prior to 2.4.4. It can be exploited over the network by an unauthenticated attacker, meaning they do not need a user...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors CVE-2023-2009 is a Medium-severity (CVSS 4.4) stored cross-site scripting (XSS) issue in the Pretty Url WordPress plugin (slug: pretty-url) affecting versions prior to 1.5.5. An attacker must already be authenticated with administrator-level permissions...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors The PayU India (PayU CommercePro) WordPress plugin (slug: payu-india) has a Medium-severity vulnerability (CVSS 6.1) identified as CVE-2024-27193 (CVE record). It is a Reflected Cross-Site Scripting (XSS) issue triggered through the type parameter in...
by Ivan Sorkin | Mar 18, 2026 | Plugins
Attack Vectors Change Table Prefix (slug: change-table-prefix) is affected by a High-severity Cross-Site Request Forgery (CSRF) vulnerability (CVSS 7.1; CVE-2024-25932) in versions up to and including 2.0. The primary attack path is social engineering: an attacker can...
Recent Comments