by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors Architecturer (WordPress theme) versions up to and including 3.8.8 are affected by a Medium-severity issue (CVSS 6.1) tracked as CVE-2026-27358. This is a reflected cross-site scripting (XSS) vulnerability, which typically relies on persuading a person...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-23799 is a Medium severity missing authorization issue in the Tutor LMS – eLearning and online course solution WordPress plugin (slug: tutor), affecting versions up to and including 3.9.5. The primary attack path involves an attacker who...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors Starto (WordPress theme) versions up to and including 2.1.9 have a Medium-severity Reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-27352, CVSS 6.1). This type of issue is commonly triggered when a user interacts with a crafted URL or...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-23802 is a High severity vulnerability (CVSS 7.2) affecting AI Engine – The Chatbot, AI Framework & MCP for WordPress (slug: ai-engine) in versions up to and including 3.3.2. The issue is an authenticated (Editor+) arbitrary file upload,...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2025-69338 is a High-severity vulnerability (CVSS 7.5) affecting the Riode Core WordPress plugin (riode-core) versions 1.6.26 and earlier. It is an unauthenticated SQL injection, meaning an attacker may be able to target a vulnerable site over the...
Recent Comments