March 29, 2026CVE-2026-3584 is a critical remote code execution vulnerability in the Kali Forms plugin for WordPress, affecting versions up to 2.4.9.…
March 24, 2026CVE-2026-4001 affects Woo Custom Product Addons Pro (up to v5.4.1) with a critical CVSS score of 9.8. Unauthenticated attackers can…
March 24, 2026CVE-2026-4283 in the Shapepress Dsgvo plugin (up to 3.1.38) allows unauthenticated users to irreversibly destroy non-admin accounts. Update to 3.1.39…
March 23, 2026CVE-2025-15403 affects the Custom Registration Form Builder With Submission Manager plugin (up to 6.0.7.1) with a critical CVSS score of…
March 23, 2026CVE-2025-10484 affects the Registration Login With Mobile Phone Number plugin (v1.3.1) with a critical CVSS score of 9.8. Unauthenticated attackers…
March 23, 2026CVE-2026-23800 affects the Modular Connector plugin (v2.5.2) with a critical CVSS score of 9.8, allowing unauthenticated privilege escalation. Update to…
March 23, 2026CVE-2025-68015 affects the Event Tickets With Ticket Scanner plugin (up to v2.8.5) with a critical CVSS score of 9.8. Patch…
March 23, 2026The g-FFL Checkout plugin for WordPress (up to version 2.1.0) has a critical file upload vulnerability (CVE-2025-68001) with a CVSS…
March 23, 2026CVE-2025-69101 affects the Workreap Core plugin for WordPress (up to 3.4.0) with a critical CVSS score of 9.8. Unauthenticated attackers…
March 23, 2026CVE-2026-23550 affects the Modular Connector plugin (up to v2.5.1) with a critical CVSS score of 9.8. Unauthenticated attackers can gain…
March 23, 2026CVE-2026-4038 affects the Aimogen Pro plugin for WordPress, with a critical CVSS score of 9.8. Unauthenticated attackers can escalate privileges.…
March 23, 2026CVE-2026-2631 affects the Datalogics plugin for WordPress, allowing unauthenticated attackers to escalate privileges to admin level. With a CVSS score…
March 23, 2026CVE-2026-24373 affects the Custom Registration Form Builder With Submission Manager plugin with a critical CVSS score of 9.8, allowing unauthenticated…
March 18, 2026CVE-2025-14301 affects the Woosa Ai For WooCommerce plugin (up to version 1.3.0) with a critical CVSS score of 9.8. Unauthenticated…
March 18, 2026CVE-2025-14502 is a critical Local File Inclusion vulnerability in the News And Blog Designer Bundle plugin for WordPress, affecting versions…
March 18, 2026CVE-2025-69097 reveals a critical file upload vulnerability in the WPLMS Plugin for WordPress, affecting versions up to 1.9.9.5.4. Unauthenticated attackers…
March 18, 2026CVE-2025-15030 affects the Profile Builder plugin (up to 3.15.1) with a critical CVSS score of 9.8. Unauthenticated attackers can exploit…
March 18, 2026CVE-2025-68912 affects the HDForms plugin for WordPress (up to 1.6.1) with a critical CVSS score of 9.1. Unauthenticated attackers can…
March 18, 2026CVE-2025-14741 affects the ACF Frontend Form Element plugin (up to version 3.28.25) with a critical CVSS score of 9.1. Unauthenticated…
March 18, 2026CVE-2025-14736 affects the ACF Frontend Form Element plugin (up to 3.28.29) with a critical CVSS score of 9.8. Unauthenticated attackers…
