by Ivan Sorkin | Mar 12, 2026 | Plugins
CVE-2026-28038 is a medium-severity authorization issue (CVSS 4.3) affecting Ultimate Addons for WPBakery Page Builder (slug: Ultimate_VC_Addons) in versions up to and including 3.21.1. According to the published advisory, the plugin lacks a required capability check...
by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors EventON (Pro) – WordPress Virtual Event Calendar Plugin (slug: eventon) is affected by a Medium-severity vulnerability (CVSS 6.1, CVE-2026-28037) that enables Reflected Cross-Site Scripting (XSS) in versions up to and including 4.9.12. This attack...
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors CVE-2026-28036 is a Medium-severity Server-Side Request Forgery (SSRF) issue (CVSS 6.4) affecting the Restaurant WordPress Theme | Ratatouille theme (slug: ratatouille) in versions up to and including 1.2.6. The key exposure is that an attacker needs...
by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors Super Stage WP (slug: super-stage-wp) versions up to and including 1.0.1 are affected by CVE-2026-1542, rated High severity (CVSS 8.1). The reported issue is unauthenticated, meaning an external attacker does not need a login to attempt exploitation...
by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors CVE-2026-27984 is a High-severity (CVSS 8.8) issue affecting the WordPress plugin Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets (slug: widget-options) in all versions up to and including 4.1.3. This...
Recent Comments