by Ivan Sorkin | Mar 10, 2026 | Plugins
Attack Vectors Product: Happy Addons for Elementor (slug: happy-elementor-addons) Vulnerability: CVE-2026-2918 Severity: Medium (CVSS 6.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) This issue affects Happy Addons for Elementor versions 3.21.0 and below. An...
by Ivan Sorkin | Mar 10, 2026 | Plugins
Attack Vectors CVE-2026-3903 is a Medium-severity Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Modular DS: Monitor, update, and backup multiple websites (slug: modular-connector) in versions up to and including 2.5.1. An attacker does...
by Ivan Sorkin | Mar 10, 2026 | Plugins
Attack Vectors JetBooking (WordPress plugin slug: jet-booking) has a High-severity vulnerability (CVSS 7.5) that can be exploited without authentication. According to the disclosed advisory, attackers can target the public-facing functionality that accepts the...
by Ivan Sorkin | Mar 10, 2026 | Themes
Attack Vectors Affected product: Astra theme for WordPress (slug: astra) versions up to and including 4.12.3. Vulnerability: CVE-2026-3534 (Severity: Medium, CVSS 6.4; vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N). Public record:...
by Ivan Sorkin | Mar 10, 2026 | Plugins
Attack Vectors WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters (slug: wp-google-map-plugin) versions up to and including 4.9.1 are affected by CVE-2026-3222, a High severity issue (CVSS 7.5, vector:...
Recent Comments