by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors UberSlider Classic (slug: uberSlider_classic) versions 2.5 and earlier are affected by a Medium-severity Reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-28102, CVSS 6.1). Reflected XSS typically relies on an attacker sending a specially...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors UberSlider MouseInteraction (WordPress plugin slug: uberSlider_mouseinteraction) has a Medium severity vulnerability (CVSS 6.1) identified as CVE-2026-28101. The issue is a Reflected Cross-Site Scripting (XSS) risk affecting versions up to and including...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors UberSlider PerpetuumMobile (also described as the UberSlider – Layer Slider WordPress Plugin, slug: uberSlider_perpetuummobile) has a Medium-severity vulnerability (CVSS 6.1) identified as CVE-2026-28100. The issue is a Reflected Cross-Site...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors UberSlider Ultra (UberSlider – Layer Slider WordPress Plugin, slug: uberSlider_ultra) is affected by a Medium-severity reflected cross-site scripting (XSS) issue (CVE-2026-28099, CVSS 6.1). Reflected XSS commonly works when an attacker places...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors Guff – Blog & Magazine Ghost Theme (slug: guff) versions up to and including 1.0.1 have a Medium severity issue (CVSS 5.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) tied to missing authorization. In practical terms, this means an attacker...
Recent Comments