by Ivan Sorkin | Mar 3, 2026 | Plugins
Attack Vectors CVE-2026-1651 affects the WordPress plugin Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (slug: email-subscribers) in versions up to 5.9.16. It is rated Medium severity (CVSS 6.5). This...
by Ivan Sorkin | Mar 3, 2026 | Plugins
Attack Vectors PostX (plugin: Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX, slug: ultimate-post) has a High severity vulnerability (CVSS 7.2, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) tracked as CVE-2026-1273. It affects all versions up to...
by Ivan Sorkin | Mar 2, 2026 | Plugins
Attack Vectors CVE-2026-1492 is a Critical vulnerability (CVSS 9.8) affecting the WordPress plugin User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (slug:...
by Ivan Sorkin | Mar 2, 2026 | Plugins
Attack Vectors Page Builder by SiteOrigin (slug: siteorigin-panels) is affected by a High-severity vulnerability (CVSS 8.8, CVE-2026-2448) impacting versions up to and including 2.33.5. The issue is an Authenticated (Contributor+) Local File Inclusion (LFI), meaning...
by Ivan Sorkin | Mar 2, 2026 | Plugins
Attack Vectors The vulnerability CVE-2026-2628 affects the WordPress plugin All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login (slug: login-with-azure) in versions up to and including 2.2.5. Because the issue is an authentication bypass, an attacker does not...
Recent Comments