A security vulnerability has been identified in the User Profile Builder plugin for WordPress, impacting all versions up to and including 3.16.4.
The flaw stems from a coding error in how the plugin processes user registration submissions. When a username between 61 and 70 characters is entered, WordPress core rejects the registration with an ...
Continue reading
A critical security flaw, tracked as CVE-2026-15341, affects the User Session Synchronizer plugin for WordPress. This vulnerability allows unauthenticated attackers (people with no existing access to your site) to take over any user account on your site, including full administrator accounts, without needing to know any of your site's passwords or ...
Continue reading
A security flaw tracked as CVE-2026-15303 impacts the 6Storage Rentals plugin for WordPress, with all versions up to and including 2.27.0 affected. The issue exists in a plugin feature that handles user account logins, which does not require any verification (such as a security check, proof of account ownership, or permission confirmation) before ...
Continue reading
A critical security flaw has been found in the RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress, affecting all versions up to and including 1.0.4. The plugin fails to properly validate file paths when processing file deletion requests, and the secret security token required to trigger this deletion feature is ...
Continue reading
