A Cross Site Scripting (XSS) vulnerability was found in the Location Weather plugin up to version 3.0.6. This issue allows contributors to inject malicious scripts, potentially leading to unauthorized modifications or data exposure. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. Users of the Location Weather plugin should be aware of this vulnerability and take necessary pr [truncated]
A Deserialization of Untrusted Data vulnerability exists in ShapedPlugin LLC Real Testimonials testimonial-free, allowing Object Injection. This issue affects Real Testimonials from n/a through <= 3.1.15. The vulnerability involves deserialization of untrusted data, potentially leading to Object Injection. Defenders should verify exposure, assess potential impact, and prioritize remediation efforts for Wo [truncated]
CVE-2026-49777 is a critical vulnerability in the Product Slider Pro for WooCommerce plugin, caused by improper validation of specified quantity in input. This vulnerability, with a CVSS score of 10, allows for malicious software to be implanted. The affected versions of the plugin are from n/a to 3.5.4.
