by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors Font Pairing Preview For Landing Pages (slug: wp-font-pairing-preview) has a Medium-severity issue (CVSS 4.3) identified as CVE-2026-1086. The vulnerability affects all versions up to and including 1.3. This is a Cross-Site Request Forgery (CSRF)...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors Purchase Button For Affiliate Link (slug: purchase-button) has a Medium-severity vulnerability (CVSS 4.3, CVE-2026-1073) that can be exploited through Cross-Site Request Forgery (CSRF). This attack relies on user interaction: an attacker must trick a...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors DA Media GigList (slug: damedia-giglist) versions 1.9.0 and earlier are affected by a Medium-severity stored cross-site scripting (XSS) issue tracked as CVE-2026-1805 (CVSS 6.4). The most likely real-world path is an authenticated WordPress user with...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors Consensus Embed (slug: consensus-embed) has a Medium severity vulnerability (CVSS 6.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) tracked as CVE-2026-1823. The issue is a stored cross-site scripting (XSS) risk triggered through the plugin’s consensus...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors The vulnerability (CVE-2026-1820) affects the WordPress plugin Media Library Alt Text Editor (slug: media-library-alt-text-editor) in versions up to and including 1.0.0. It is rated Medium severity (CVSS 6.4). An attacker needs a valid WordPress account...
Recent Comments