plugin vulnerability

Everything Patch Herald has reported about plugin vulnerability: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

WordPress DoubleScale CRM Plugin Has High-Severity File Upload Flaw in Versions Up to 1.5.1

A vulnerability in the DoubleScale CRM plugin allows low-level users to upload executable files, enabling remote code execution if the Helpdesk module is active.

Oct 16, 2026

Vulnerabilities

9.8 CVSS Score: Frontend Dashboard 3.0.7 Has Critical Privilege Escalation Vulnerability

A critical vulnerability in the Frontend Dashboard plugin allows privilege escalation. The flaw affects versions through 3.0.7. No fix status is provided.

Oct 14, 2026