by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors The kingler WordPress theme (Kingler) up to version 1.7 is affected by an unauthenticated PHP Object Injection vulnerability (severity: High, CVSS 8.1). This means an attacker can attempt to target sites using this theme without needing a login, by...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors CVE-2026-27437 affects the Tennis SportClub – Tennis Sports Events WordPress Theme (slug: tennis-sportclub) in versions up to and including 1.2.3. This is a High severity issue (CVSS 8.1) and is described as an unauthenticated PHP Object Injection...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors CVE-2026-27417 affects the Sweet Date WordPress theme (slug: sweetdate) in versions up to 4.0.1. The issue is an unauthenticated PHP object injection risk caused by deserialization of untrusted input, meaning an external attacker could potentially...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-27397 affects the WordPress plugin Really Simple Security Pro (slug: really-simple-ssl-pro) in versions up to and including 9.5.4.0. The issue is an Insecure Direct Object Reference (IDOR) that can be exploited by an authenticated user with...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-23546 is a Medium-severity issue (CVSS 4.3) affecting the WordPress plugin Classified Listing – AI-Powered Classified ads & Business Directory Plugin (slug: classified-listing) in versions 5.3.4 and below. The key risk is that an attacker...
Recent Comments