by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors AllInOne – Banner Rotator (slug: all-in-one-bannerRotator) versions up to and including 3.8 are affected by a Medium-severity Reflected Cross-Site Scripting (XSS) issue (CVE-2026-28112, CVSS 6.1). In practical terms, an attacker can craft a...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors CVE-2026-28110 is a Medium severity (CVSS 6.1) Reflected Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin LambertGroup – AllInOne – Banner with Playlist (slug: all-in-one-bannerWithPlaylist) in versions up to and...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors The WordPress plugin LambertGroup – AllInOne – Content Slider (slug: all-in-one-contentSlider) is affected by a Medium-severity vulnerability (CVSS 6.1) identified as CVE-2026-28109. The issue is a reflected cross-site scripting (XSS)...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors LambertGroup – AllInOne – Banner with Thumbnails (slug: all-in-one-thumbnailsBanner) is affected by a Medium-severity reflected cross-site scripting (XSS) issue (CVSS 6.1, CVE-2026-28108). In practical terms, an attacker can craft a link...
by Ivan Sorkin | Mar 5, 2026 | Plugins
Attack Vectors Site Suggest (WordPress plugin slug: site-suggest) versions up to and including 1.3.9 are affected by a Medium-severity issue (CVSS 5.3) identified as CVE-2026-28104. The core concern is that an attacker does not need to be logged in to reach a...
Recent Comments