by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Lawyer Directory (slug: lawyer-directory) versions up to and including 1.3.2 are affected by a High-severity vulnerability (CVSS 7.2) that allows unauthenticated attackers to inject malicious code into content that your site later serves to visitors....
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Severity: Medium (CVSS 6.1). CVE-2026-28126 affects the RH Frontend Publishing Pro plugin (also known as Frontend Publishing Pro; slug: rh-frontend) in versions up to and including 4.3.2. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-28114 affects the WooCommerce License Manager WordPress plugin (slug: fs-license-manager) and is rated High severity (CVSS 7.2; CVE link). The issue is an authenticated arbitrary file upload, meaning an attacker must first have valid access....
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Ultimate Learning Pro (slug: indeed-learning-pro) is affected by a Medium-severity vulnerability (CVE-2026-28113, CVSS 6.1) that enables reflected cross-site scripting (XSS) in versions up to and including 3.9.1. This means a malicious actor can attempt...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-28078 affects the Directory Listings WordPress plugin – uListing (slug: ulisting) in versions up to and including 2.2.0. This is a Medium-severity issue (CVSS 4.9) that requires an authenticated user with Editor-level access or higher to...
Recent Comments