by Ivan Sorkin | Mar 2, 2026 | Plugins
Attack Vectors The vulnerability (CVE-2026-2269) affects the WordPress plugin Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin (slug: uncanny-automator) in versions up to and including 7.0.0.3. It is rated High severity (CVSS...
by Ivan Sorkin | Mar 2, 2026 | Plugins
Attack Vectors LatePoint – Calendar Booking Plugin for Appointments and Events (slug: latepoint-2) is affected by an authenticated SQL Injection vulnerability in versions up to and including 5.2.7. The issue is tied to the plugin’s JSON Import capability, where...
by Ivan Sorkin | Mar 2, 2026 | Plugins
Attack Vectors The WordPress plugin AI ChatBot with ChatGPT and Content Generator by AYS (slug: ays-chatgpt-assistant) has a Medium severity vulnerability (CVSS 5.3, CVE-2026-1336) that can be exploited remotely over the internet. Because the issue involves missing...
by Ivan Sorkin | Mar 2, 2026 | Plugins
Attack Vectors The vulnerability CVE-2026-1566 affects the LatePoint – Calendar Booking Plugin for Appointments and Events (slug: latepoint-2) in versions 5.2.7 and earlier. It is rated High severity with a CVSS 8.8 score...
by Ivan Sorkin | Mar 2, 2026 | Themes
Attack Vectors CVE-2026-2583 affects the Blocksy WordPress theme (slug: blocksy) in versions up to and including 2.1.30. It is a Medium-severity issue (CVSS 6.4) involving authenticated (Contributor-level or higher) users. The practical attack path is straightforward:...
Recent Comments