by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors Musico (WordPress theme) versions up to and including 3.2.4 are affected by a Medium-severity Reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-27367, CVSS 6.1). This type of issue is typically exploited by sending a crafted link to a...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Bakery Autoresponder Addon (WordPress plugin slug: vc-autoresponder-addon) has a High severity vulnerability (CVSS 7.2, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) identified as CVE-2026-27363. The issue is an unauthenticated stored cross-site...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors The Bakery Autoresponder Addon plugin (product slug: vc-autoresponder-addon) has a missing authorization (capability) check in versions up to and including 1.0.6. With a Medium severity rating (CVSS 5.3), this issue can allow an unauthenticated attacker...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors The PowerPress Podcasting plugin by Blubrry (slug: powerpress) is affected by a High-severity vulnerability (CVE-2026-23798, CVSS 7.5) in versions up to and including 11.15.10. The issue can be triggered by an authenticated WordPress user with...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-27359 is a Medium-severity reflected cross-site scripting (XSS) vulnerability affecting the Awa Plugins WordPress plugin (awa-plugins) in versions 1.4.4 and below. Reflected XSS typically relies on a victim being prompted to interact with a...
Recent Comments