Cross-Site Request Forgery in Taqnix Plugin
Overview of CVE-2026-3565 A Cross-Site Request Forgery vulnerability affects the Taqnix plugin. This flaw has a CVSS score…
Category
Security
BetterDocs Missing Authorization Vulnerability
Users can access restricted documentation features in BetterDocs. This missing authorization flaw affects data privacy. It exposes sensitive…
ExactMetrics Missing Authorization Vulnerability
Authenticated users can access unauthorized features in ExactMetrics. This flaw exposes your analytics data. It may allow privilege…
Stored XSS in Gutentor WordPress Plugin
Security researchers found a stored cross-site scripting (XSS) flaw in Gutentor. This WordPress page builder plugin has over…
Missing Authorization in Booking Calendar Contact Form Plugin
Overview of CVE-2026-6810 A missing authorization vulnerability affects the Booking Calendar Contact Form plugin. This flaw has a…
MaxiBlocks Builder Arbitrary File Upload Vulnerability
Attackers can upload malicious files through MaxiBlocks Builder. This puts your WordPress site at risk. You need to…
Critical Arbitrary File Upload in Drag and Drop File Upload for Contact Form 7 Plugin
# CVE-2026-5364: Critical Arbitrary File Upload in Drag and Drop File Upload for Contact Form 7 Plugin (CVSS…
PHP Supply Chain Attack: Backdoor Discovered in Popular Composer Package
A supply chain attack targeting the PHP ecosystem has been discovered this week. Security researchers found a backdoor…
CrawlerX Botnet Evolves: New Variant Targets WooCommerce Sites
Security researchers have identified a new variant of the CrawlerX botnet that specifically targets WooCommerce sites. The latest…
CVE-2025-13456: Reflected XSS in ShopBuilder WooCommerce Plugin (CVSS 6.1)
A Reflected Cross-Site Scripting vulnerability has been discovered in the ShopBuilder WordPress plugin for WooCommerce. Tracked as CVE-2025-13456…