These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The CVE-2026-106603 vulnerability affects the WordPress HollerBox plugin, versions up to 2.3.14. This Insecure Direct Object References (IDOR) vulnerability allows for authorization bypass through user-controlled keys. The CVSS score is 6.5, indicating a medium severity. The vulnerability was published on October 8, 2026, and last modified on October 9, 2026.
CVE-2026-104408 is a SQL injection vulnerability in the Groundhogg plugin for WordPress, allowing for blind SQL injection attacks. The issue affects Groundhogg versions from n/a through 4.8.3. Defenders should assess exposure and prioritize patching or mitigations. The vulnerability could lead to unauthorized database access and potential data tampering or extraction. Input validation and sanitization are [truncated]
CVE-2026-48885 is a high-severity unauthenticated Cross Site Scripting (XSS) vulnerability affecting HollerBox versions up to 2.3.10.1. Defenders should assess exposure, prioritize remediation, and verify vendor-provided fixes.
CVE-2026-40793 is a medium-severity vulnerability (CVSS Score: 6.5) affecting Groundhogg, a WordPress plugin, prior to version 4.4.1. The vulnerability is classified as a Subscriber Broken Access Control issue. According to the CVE record [resourceLinkAnnotations:cve-org], it was published on 2026-06-15T21:16:51.660Z and last modified on 2026-06-15T21:24:32.790Z. The vulnerability allows an attacker to po [truncated]
CVE-2026-40727 is a HIGH-severity vulnerability in Groundhogg, a WordPress plugin, affecting versions up to 4.4. This vulnerability allows a sales representative to delete arbitrary files, potentially leading to significant system compromise.