PatchSiren

bannersky CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH bannersky CVE published 2026-10-15

CVE-2026-108498

A Cross Site Scripting (XSS) vulnerability exists in the WordPress BSK PDF Manager plugin versions up to 3.8.1. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability can lead to security breaches if not addressed. Defenders should assess their exposure, verify and update the plugin, and implement additional security measures to detec [truncated]

MEDIUM bannersky CVE published 2026-04-08

CVE-2026-39686

The BSK PDF Manager plugin for WordPress has a vulnerability that allows exposure of sensitive system information to an unauthorized control sphere, potentially enabling retrieval of embedded sensitive data. This issue affects BSK PDF Manager versions from n/a through <= 3.7.2. The vulnerability has been assigned a CVSS score of 5.3 and a severity of MEDIUM. Users should review their deployments and consi [truncated]