by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors The vulnerability CVE-2026-27379 affects the WordPress plugin NextScripts: Social Networks Auto-Poster (slug: social-networks-auto-poster-facebook-twitter-g) in versions up to and including 4.4.7. It is rated High severity (CVSS 7.5). The primary attack...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors CVE-2026-27376 is a Medium-severity (CVSS 6.1) reflected cross-site scripting (XSS) vulnerability affecting the Claue – Clean, Minimal Elementor WooCommerce WordPress theme (“claue”) in versions up to and including 2.2.7. In practical terms, an...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-27374 affects the WooCommerce Order Details plugin (woocommerce-order-details) for WordPress, with a Medium severity rating (CVSS 5.3). The reported issue is a missing authorization (capability) check in versions up to and including 3.1. From a...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Medium severity (CVSS 5.3) information exposure issues are often exploited quietly because they do not require malware or complex steps—just the ability to reach a vulnerable site. In Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors CVE-2026-27369 is a High-severity vulnerability (CVSS 8.1) affecting the Celeste WordPress theme (slug: celeste) in versions up to and including 1.3.6. The issue is an unauthenticated PHP Object Injection weakness caused by deserialization of untrusted...
Recent Comments