PatchSiren

PluginUs.Net CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH PluginUs.Net CVE published 2026-10-13

CVE-2026-108179

The CVE-2026-108179 vulnerability is a SQL Injection issue in the WordPress WOLF plugin, affecting versions up to 1.1.1. This vulnerability allows for Blind SQL Injection, posing a significant risk to WordPress installations using the affected plugin versions. The vulnerability's CVSS score of 7.6 indicates a high severity level. Defenders should assess exposure and apply patches or mitigations to prevent [truncated]

MEDIUM PluginUs.Net CVE published 2026-10-13

CVE-2026-108489

CVE-2026-108489 is a Sensitive Data Exposure vulnerability affecting the WordPress Active Products Tables for WooCommerce plugin versions up to 2.1.3. This issue allows attackers to retrieve embedded sensitive data. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. Defenders should assess their exposure and take necessary actions to protect against potential data exposure. Th [truncated]

MEDIUM PluginUs.Net CVE published 2026-10-13

CVE-2026-108174

The CVE-2026-108174 vulnerability affects WordPress FOX plugin versions up to 1.5.4, categorized as a Missing Authorization issue allowing exploitation of incorrectly configured access control security levels. This medium-severity vulnerability, with a CVSS score of 5.3, requires verification of plugin versions and access control configurations to prevent exploitation. Affected deployments should be ident [truncated]