by Ivan Sorkin | Mar 22, 2026 | Plugins
Attack Vectors CVE-2025-6229 is a Medium-severity (CVSS 6.4) Stored Cross-Site Scripting (XSS) issue in the WordPress plugin Sina Extension for Elementor (slug: sina-extension-for-elementor) affecting versions up to and including 3.7.0. The attack requires an...
by Ivan Sorkin | Mar 22, 2026 | Plugins
Attack Vectors ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema (WordPress plugin slug: reviewx) has a Medium-severity vulnerability (CVE-2025-10731, CVSS 5.3) affecting versions up to and including 2.2.12. Because the issue is...
by Ivan Sorkin | Mar 22, 2026 | Plugins
Attack Vectors CVE-2025-10736 is a Medium-severity vulnerability (CVSS 6.5) affecting the WordPress plugin ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema (slug: reviewx) in versions up to and including 2.2.10. Because this issue can...
by Ivan Sorkin | Mar 22, 2026 | Plugins
Attack Vectors CVE-2026-2580 is a High severity (CVSS 7.5) vulnerability affecting the WordPress plugin WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters (slug: wp-google-map-plugin) in versions up to and including 4.9.1. The...
by Ivan Sorkin | Mar 21, 2026 | Plugins
Attack Vectors CVE-2026-3427 affects the Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin (slug: wordpress-seo) in versions up to and including 27.1.1. It is a Medium severity issue (CVSS 6.4) that requires an attacker to have an authenticated...
Recent Comments