Prime Slider Addons for Elementor: Affected Plugin
Prime Slider Addons for Elementor is a WordPress plugin affected by the BdThemes supply chain attack and temporarily closed.
Tag: WordPress
Smart Admin Assistant: Affected Plugin
Smart Admin Assistant is a WordPress plugin affected by the BdThemes supply chain attack and temporarily closed.
Ultimate Post Kit Addons for Elementor: Affected Plugin
Ultimate Post Kit Addons for Elementor is a WordPress plugin affected by the BdThemes supply chain attack and temporarily closed.
Ultimate Store Kit: Affected Plugin
Ultimate Store Kit is a WordPress plugin with 6,000+ active installs that was affected by the BdThemes supply chain attack and temporarily…
Biggopti: Vulnerable Component in BdThemes Plugins
Biggopti is an internal component shipped with BdThemes plugins that fetches promotional banners from an API server and was vulnerable to XSS…
CVE-2026-64638: WordPress Pre-Auth Reflected XSS (XSS2Shell)
CVE-2026-64638 is a pre-authentication reflected XSS vulnerability in WordPress, rated 8.9 on the CVSS scale, that can be exploited to achieve PHP…
pwn.ai Discovers Critical WordPress XSS Chain
pwn.ai, a security research firm, discovered and responsibly disclosed CVE-2026-64638, a pre-authentication XSS vulnerability in WordPress that can lead to PHP code…
WordPress Pre-Auth XSS Flaw CVE-2026-64638 Could Lead to PHP Code Execution
WordPress has released a critical security update to address a pre-authentication reflected cross-site scripting (XSS) vulnerability that affects all versions of the…
10Web: WordPress Plugin Vendor Affected by CVE-2021-24139
10Web is a vendor of the Photo Gallery WordPress plugin affected by CVE-2021-24139, a critical vulnerability exploited by the JadeProx operation.
CVE-2021-24139: Critical Vulnerability in 10Web Photo Gallery WordPress Plugin
CVE-2021-24139 is a critical vulnerability in the 10Web Photo Gallery WordPress plugin with a CVSS score of 9.8, exploited by the JadeProx…