by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors The WordPress plugin Fade Slider (slug: fade-slider) has a Medium severity vulnerability (CVSS 6.1, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) affecting versions up to and including 2.5. This issue is a Reflected Cross-Site Scripting (XSS) weakness,...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors High severity vulnerability (CVSS 7.2) affects the WordPress plugin WP App Bar (slug: wp-app-bar) in versions up to and including 1.5. Identified as CVE-2026-1074, this issue allows unauthenticated attackers to inject stored malicious scripts using the...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors The vulnerability CVE-2026-2420 affects the WordPress plugin LotekMedia Popup Form (slug: ltm-popup-form) in versions up to and including 1.0.6. It is a Medium severity issue (CVSS 4.4) that requires an authenticated user with Administrator-level access...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors True Ranker (WordPress plugin slug: seo-local-rank) versions 2.2.9 and below have a Medium severity vulnerability (CVSS 4.3, CVE-2026-1085) that can be triggered through Cross-Site Request Forgery (CSRF). In practical terms, an unauthenticated attacker...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors CVE-2026-1071 is a Medium-severity stored cross-site scripting (XSS) vulnerability affecting the WordPress plugin Carta Online (slug: carta-online) in versions up to and including 2.13.0. The issue occurs through the plugin’s administrator-accessible...
Recent Comments