by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors The WeDesignTech Ultimate Booking Addon (slug: wedesigntech-ultimate-booking-addon) vulnerability CVE-2025-69340 is rated Medium severity (CVSS 5.3). It stems from a missing authorization (capability) check in versions up to and including 1.0.3, which...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Builderall for WordPress (slug: builderall-cheetah-for-wp) versions 3.0.1 and below are affected by a High severity vulnerability (CVSS 8.8) that enables authenticated Remote Code Execution. This means an attacker must first have a valid WordPress...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-28135 affects the WordPress plugin Royal Addons for Elementor – Addons and Templates Kit for Elementor (slug: royal-elementor-addons) in versions up to and including 1.7.1049. Rated Medium severity (CVSS 5.3), it can be triggered remotely over...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors High severity vulnerability CVE-2026-28134 affects the JetEngine WordPress plugin (slug: jet-engine) in versions 3.7.2 and earlier. It allows authenticated attackers with Contributor-level access or higher to execute code on the web server (Remote Code...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-28133 is a High-severity vulnerability (CVSS 8.8) affecting the Filr – Secure document library WordPress plugin (slug: filr-protection) in versions <= 1.2.13. The issue is exploitable by an authenticated user with Contributor-level access or...
Recent Comments