by Ivan Sorkin | Mar 12, 2026 | Plugins
Attack Vectors CVE-2026-27983 is a Critical vulnerability (CVSS 9.8) affecting the LMS Elementor Pro WordPress plugin (slug: lms-elementor-pro) in versions <= 1.0.4. Because the issue is unauthenticated, an attacker does not need a valid login to attempt...
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors CarZone – A Complete Car Dealer HTML Wire-Frame (slug: carzone) is affected by CVE-2026-27338, a High severity issue (CVSS 7.5; CVE record) that can be triggered over the network by an authenticated user with Subscriber-level access or higher....
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors CVE-2026-24960 is a High severity vulnerability (CVSS 8.8) affecting the Charety – Charity & Donation WordPress Theme (slug: charety) in versions prior to 2.0.2. The issue allows an attacker with an authenticated WordPress account (including...
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors CVE-2026-22417 is a High-severity vulnerability (CVSS 8.1) affecting the Grand Wedding WordPress theme (slug: grandwedding) in versions <= 3.1.0. The issue is described as an unauthenticated PHP Object Injection, meaning an attacker can target...
by Ivan Sorkin | Mar 12, 2026 | Themes
Attack Vectors High severity vulnerability (CVSS 8.8) affecting Keenarch – Building & Construction WordPress Theme (slug: keenarch) in versions before 2.0.1. The issue is an authenticated (Subscriber+) arbitrary file upload risk, meaning an attacker needs a...
Recent Comments