by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors CVE-2026-2494 is a Medium-severity Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin ProfileGrid – User Profiles, Groups and Communities (slug: profilegrid-user-profiles-groups-and-communities) affecting versions up to and...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors CM Custom Reports – Flexible reporting to track what matters most (slug: cm-custom-reports) has a Medium-severity vulnerability (CVSS 6.1, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) identified as CVE-2026-2431. It is a Reflected Cross-Site Scripting...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors CVE-2026-2722 is a Medium-severity (CVSS 4.8) Stored Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin Stock Ticker (slug: stock-ticker) in versions up to and including 3.26.1. The attack occurs through administrator settings where...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors CVE-2026-3352 is a High-severity vulnerability (CVSS 7.2) affecting the Easy PHP Settings WordPress plugin (slug: easy-php-settings) in versions 1.0.4 and earlier. The attack requires an authenticated WordPress account with Administrator-level access...
by Ivan Sorkin | Mar 6, 2026 | Plugins
Attack Vectors Hammas Calendar (slug: hammas-calendar) has a Medium severity vulnerability (CVSS 6.4) identified as CVE-2026-1902. It affects versions up to and including 1.5.11. The issue can be exploited by an authenticated user with Contributor-level access or...
Recent Comments