by Ivan Sorkin | Mar 6, 2026 | Themes
Attack Vectors CVE-2024-43334 is a Medium-severity reflected cross-site scripting (XSS) issue affecting multiple WordPress themes by gavias, including the Constix – Construction Factory & Industrial WordPress Theme (slug: constix) in various versions. The...
by Ivan Sorkin | Mar 6, 2026 | Themes
Attack Vectors CVE-2024-43334 affects the Constix – Construction Factory & Industrial WordPress Theme (slug: constix) and is rated Medium severity (CVSS 6.1). The issue is a reflected cross-site scripting (XSS) weakness, meaning an attacker can try to get a...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors Frontend Admin by DynamiApps (WordPress plugin slug: acf-frontend-form-element) has a Critical privilege escalation vulnerability (CVSS 9.8) tracked as CVE-2025-14736. The primary attack path is straightforward: if an attacker can reach a user...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors CVE-2026-1306 affects the midi-Synth WordPress plugin (slug: midi-synth) in versions 1.1.0 and below, and it is rated Critical (CVSS 9.8, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The primary attack path is the plugin’s “export” AJAX action, where...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors CVE-2026-1650 affects the MDJM Event Management WordPress plugin (slug: mobile-dj-manager) in versions up to and including 1.7.8.1. The severity is Medium (CVSS 5.3), and it can be exploited over the network with no login required...
Recent Comments