---METADATA---
VENDOR: Silicon Labs
PRODUCT: SiSDK
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A cryptographic flaw in Silicon Labs SiSDK for EFR32xG27 chips results in predictable keys, potentially undermining device security and encryption.

Executive Summary:
An incorrect implementation of PUF key generation in Silicon Labs SiSDK creates predictable cryptographic keys, significantly weakening the security posture of affected EFR32xG27 hardware.

Vulnerability Details

CVE-ID: CVE-2026-2815

Affected Software: Silicon Labs SiSDK

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The issue stems from the improper use of the Physical Unclonable Function (PUF) for user key generation. This flaw permits the derivation of predictable keys, effectively bypassing the intended security guarantees of the hardware-backed encryption.

Business Impact

Predictable cryptographic keys negate the primary security value of hardware-based root-of-trust mechanisms, leading to potential unauthorized decryption of sensitive data and loss of device integrity. With a CVSS score of 8.4, this vulnerability represents a critical failure in the hardware security chain, which could lead to widespread data compromise in embedded deployments.

Remediation Plan

Immediate Action: Consult Silicon Labs' security advisories to determine if a firmware or SDK update is available to correct the key generation logic.

Proactive Monitoring: Monitor for anomalous cryptographic operations or failures in authentication protocols that rely on these generated keys.

Compensating Controls: If patching is not immediately feasible, restrict physical access to devices and ensure that sensitive communications are wrapped in additional, independent layers of encryption.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical hardware-level security concern that cannot be easily mitigated without vendor intervention. Impacted organizations must coordinate closely with Silicon Labs to implement the necessary firmware updates to restore the integrity of the device's cryptographic operations.

---METADATA---
VENDOR: loopus
PRODUCT: WP Attractive Donations System
AFFECTED_VERSIONS: n/a through 1.25
CONFIDENCE: high
MISSING: exploit_status, technical_details
---END_METADATA---

Description Summary:
The WP Attractive Donations System WordPress plugin is vulnerable to Blind SQL Injection, allowing unauthenticated attackers to query database contents.

Executive Summary:
A critical Blind SQL Injection vulnerability in the loopus WP Attractive Donations System plugin allows unauthenticated remote attackers to compromise database integrity and confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-28115

Affected Software: loopus WP Attractive Donations System

Affected Versions: n/a through 1.25

Vulnerability: This vulnerability stems from the improper neutralization of special elements used in SQL commands. It allows an unauthenticated attacker to inject malicious SQL queries, enabling unauthorized access to the underlying database.

Business Impact

Exploitation of this Blind SQL Injection flaw could result in the total compromise of site data, including donor information and administrative credentials. With a CVSS score of 9.3, the potential for full database exfiltration is significant, posing a severe threat to data privacy and regulatory compliance.

Remediation Plan

Immediate Action: Update the WP Attractive Donations System plugin to the latest available version beyond 1.25 immediately.

Proactive Monitoring: Monitor database query logs for suspicious patterns or syntax errors indicative of SQL injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to block common SQL injection payloads and malicious request patterns.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of March 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

SQL injection remains a primary vector for site takeover; therefore, this update must be treated as urgent. If an immediate patch is not possible, disable the plugin until a secure version can be verified and installed.

---METADATA---
VENDOR: ThemeREX
PRODUCT: Good Energy
AFFECTED_VERSIONS: n/a through 1.7.7
CONFIDENCE: high
MISSING: exploit_status, technical_details
---END_METADATA---

Description Summary:
The ThemeREX Good Energy WordPress theme contains a deserialization vulnerability allowing unauthenticated attackers to achieve Object Injection.

Executive Summary:
A critical deserialization vulnerability in the ThemeREX Good Energy theme allows unauthenticated attackers to perform Object Injection, potentially leading to remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-28105

Affected Software: ThemeREX Good Energy

Affected Versions: n/a through 1.7.7

Vulnerability: The theme fails to properly handle the deserialization of untrusted data. This flaw permits an unauthenticated attacker to inject malicious objects, which can lead to arbitrary code execution or other destructive outcomes.

Business Impact

Object injection vulnerabilities are high-severity flaws that can lead to full server compromise, unauthorized code execution, and persistent backdoors. Given the CVSS score of 9.8, the business impact is extreme, potentially resulting in complete loss of control over the affected web server.

Remediation Plan

Immediate Action: Update the ThemeREX Good Energy theme to the latest version beyond 1.7.7 as soon as possible.

Proactive Monitoring: Monitor server activity for unexpected process execution or unauthorized file modifications in the web directory.

Compensating Controls: Utilize a WAF to inspect incoming serialized data streams and block payloads containing known malicious object patterns.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of March 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of remote code execution vulnerabilities, this update should be prioritized above standard maintenance. Organizations must ensure that the theme is updated and verify that no unauthorized web shells have been uploaded prior to the patch.

---METADATA---
VENDOR: ThemeREX
PRODUCT: Pizza House
AFFECTED_VERSIONS: n/a through 1.4.0
CONFIDENCE: high
MISSING: patch, exploit_status
---END_METADATA---

Description Summary:
A deserialization of untrusted data vulnerability in the ThemeREX Pizza House plugin allows for remote object injection.

Executive Summary:
A critical deserialization vulnerability in the ThemeREX Pizza House plugin enables remote attackers to perform object injection, potentially leading to full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-28074

Affected Software: ThemeREX Pizza House

Affected Versions: n/a through 1.4.0

Vulnerability: The vulnerability involves the deserialization of untrusted data, which can be leveraged to perform object injection. The attack vector is unauthenticated, allowing remote malicious actors to execute arbitrary code or manipulate application logic.

Business Impact

Successful exploitation of this vulnerability poses a severe risk to organizational infrastructure, as it can lead to unauthorized code execution and complete takeover of the affected web server. Given the CVSS score of 9.8, this flaw represents a critical threat that could result in total data loss, unauthorized access to sensitive customer information, and significant reputational damage.

Remediation Plan

Immediate Action: Identify all instances of the Pizza House plugin and update to the latest available version provided by the vendor.

Proactive Monitoring: Monitor server logs for suspicious serialized strings or unusual activity originating from the web application's input fields.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block malicious serialized objects and suspicious HTTP request patterns.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Mar 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is classified as critical and requires immediate attention due to the high risk of remote code execution. Security teams should prioritize patching affected WordPress installations and perform a thorough audit of the server environment to ensure no unauthorized persistence mechanisms have been established.