by Ivan Sorkin | Mar 4, 2026 | Plugins
Attack Vectors Fluent Forms Pro Add On Pack (slug: fluentformpro) versions 6.1.17 and earlier are affected by a High-severity Stored Cross-Site Scripting (XSS) vulnerability tracked as CVE-2026-2365 (CVSS 7.2). An attacker does not need to be logged in to attempt...
by Ivan Sorkin | Mar 4, 2026 | Themes
Attack Vectors Enzio – Responsive Business WordPress Theme (slug: enzio) versions up to and including 1.1.8 are affected by a Critical unauthenticated Local File Inclusion (LFI) vulnerability (CVE-2025-31912, CVSS 9.8). This means an attacker can target a...
by Ivan Sorkin | Mar 4, 2026 | Themes
Attack Vectors The WordPress theme Vizeon – Business Consulting (slug: vizeon) is affected by a Critical vulnerability (CVE-2025-31064) that can be exploited without logging in. This means attackers can target your public website directly over the internet,...
by Ivan Sorkin | Mar 4, 2026 | Plugins
Attack Vectors Seraphinite Accelerator (WordPress plugin) has a Medium-severity vulnerability (CVE-2026-3056, CVSS 4.3) that can be exploited by an authenticated user with Subscriber-level access or higher. In practical terms, this means any account that can log...
by Ivan Sorkin | Mar 4, 2026 | Plugins
Attack Vectors CVE-2026-1674 is a Medium severity vulnerability (CVSS 6.5) affecting the WordPress plugin Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder (slug: gutena-forms) in versions 1.6.0 and earlier. The attack...
Recent Comments