by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors The Pizza House – Restaurant / Cafe / Bistro WordPress theme (slug: pizzahouse) in versions up to and including 1.4.0 has a High-severity vulnerability (CVSS 8.1) that can be triggered remotely without authentication. In practical business terms,...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-27428 affects the WordPress plugin Eagle Booking (slug: eagle-booking) in versions up to and including 1.3.4.3. This is a Medium severity issue (CVSS 6.5, vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The key business-relevant point: an...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors Metro (WordPress theme) versions up to and including 2.13 are affected by a Medium-severity reflected cross-site scripting (XSS) vulnerability (CVE-2026-27382, CVSS 6.1). Reflected XSS typically relies on an attacker getting a real user to click a...
by Ivan Sorkin | Mar 5, 2026 | Themes
Attack Vectors Gecko 6.0 – Responsive Shopify Theme – RTL support (slug: gecko) is affected by a Medium-severity Reflected Cross-Site Scripting (XSS) vulnerability in versions up to and including 1.9.8 (CVE: CVE-2026-27375, CVSS 6.1). The most common...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent (slug: tablesome) is affected by an authenticated (Subscriber+) SQL Injection vulnerability in versions up to and including 1.2.3. Severity is described as Medium with a CVSS...
Recent Comments