by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors MailArchiver (slug: mailarchiver) versions 4.4.0 and earlier are affected by a Medium-severity stored cross-site scripting (XSS) issue (CVSS 4.8). The attack requires an authenticated user with Administrator-level permissions or higher to enter a...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors ZIP Code Based Content Protection (slug: zip-code-based-content-protection) versions 1.0.2 and earlier contain a High-severity SQL injection vulnerability (CVE-2025-14353, CVSS 7.5). The issue is exposed through the publicly reachable “zipcode” input,...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors The Community Events WordPress plugin (slug: community-events) has a Medium-severity SQL Injection vulnerability (CVE-2026-2429) affecting versions up to and including 1.5.8. The vulnerable entry point is a venue-related CSV import workflow, where the...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors High severity (CVSS 7.5) vulnerability CVE-2026-2020 affects the JS Archive List WordPress plugin (slug: jquery-archive-list-widget) in versions 6.1.7 and below. The issue can be exploited by an authenticated user with Contributor-level access or...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors In ProfileGrid – User Profiles, Groups and Communities (slug: profilegrid-user-profiles-groups-and-communities), versions up to and including 5.9.8.1 contain a Medium-severity authorization gap (CVE-2026-2488, CVSS 4.3). This weakness can be abused by...
Recent Comments