by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors CVE-2026-22480 is a medium-severity vulnerability (CVSS 6.6) affecting the WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More WordPress plugin (webtoffee-product-feed) in versions up to and including 2.3.3. This...
by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors CVE-2026-27095 is a High severity issue (CVSS 8.1) affecting the WordPress plugin Bus Ticket Booking with Seat Reservation (slug: bus-ticket-booking-with-seat-reservation) in versions up to and including 5.6.2. The vulnerability is exploitable by...
by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors CVE-2025-69347 affects the Subscription for WooCommerce – WordPress Recurring Payments Plugin (slug: subscription) in versions 1.8.10 and earlier. This is an authenticated issue, meaning an attacker must be logged in with Customer (Custom-level) access...
by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors CVE-2026-22484 is a High-severity vulnerability (CVSS 7.5) affecting the Lisfinity Core WordPress plugin (slug: lisfinity-core) used by the pebas® Lisfinity WordPress theme in versions 1.5.0 and below. Because the issue is unauthenticated, an...
by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors My Album Gallery (slug: my-album-gallery) versions <= 1.0.4 are affected by CVE-2026-22485, a High severity issue (CVSS 8.1, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). This vulnerability can be exploited by an authenticated user with...
Recent Comments