by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors CVE-2026-22471 is a High-severity issue (CVSS 8.1) affecting the Secudeal Payments for Ecommerce WordPress plugin (versions up to and including 1.1). Because the weakness can be triggered without authentication, an attacker can attempt exploitation...
by Ivan Sorkin | Mar 12, 2026 | Plugins
High severity alert (CVSS 8.8): Booking for Appointments and Events Calendar – Amelia (WordPress plugin slug: ameliabooking) is affected by an authenticated privilege escalation vulnerability in versions up to and including 1.2.38. Tracked as CVE-2026-24963, this...
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors CVE-2026-27098 is a Critical vulnerability (CVSS 9.8, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) affecting the Au Pair Agency – Babysitting & Nanny Theme for WordPress (slug: au-pair-agency) in versions <= 1.2.2. The issue is...
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors CVE-2026-22473 is a High-severity vulnerability (CVSS 7.5) affecting the Dental Clinic WordPress theme (slug: dental-2) in versions up to and including 3.7. The issue can be exploited by an authenticated user with Subscriber-level access or higher,...
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors High severity (CVSS 8.1) vulnerability CVE-2026-22474 affects the Equestrian Centre – Horse-riding School WordPress theme (slug: equestrian-centre) in versions up to and including 1.5. The issue is unauthenticated, meaning an attacker does not need a...
Recent Comments