March 18, 2026CVE-2025-14975 affects the Login Customizer plugin (v2.5.3) with a critical CVSS score of 9.8. Unauthenticated attackers can exploit this vulnerability…
March 18, 2026CVE-2025-15018 reveals a critical privilege escalation vulnerability in the Optional Email plugin for WordPress (up to 1.3.11). Unauthenticated attackers can…
March 18, 2026CVE-2025-15001 affects the FS Registration Password plugin (up to v1.0.1) with a critical CVSS score of 9.8. Unauthenticated attackers can…
March 18, 2026CVE-2025-14996 affects the AS Password Field In Default Registration Form plugin for WordPress, allowing unauthenticated attackers to escalate privileges and…
March 18, 2026CVE-2025-14998 affects the Branda White Labeling plugin (versions
March 18, 2026CVE-2025-14892 affects the Prime Listing Manager plugin (v1.1) with a critical CVSS score of 9.8. Unauthenticated attackers can escalate privileges…
March 18, 2026CVE-2025-68869 affects the Lazytasks Project Task Management plugin (up to 1.2.37) with a critical CVSS score of 9.8. Patch to…
March 18, 2026CVE-2025-68027 affects the Hydra Booking plugin (versions up to 1.1.32) with a critical CVSS score of 9.8, allowing unauthenticated attackers…
March 18, 2026CVE-2026-0920 affects the Lastudio Element Kit plugin (up to version 1.5.6.3) with a critical CVSS score of 9.8. Unauthenticated attackers…
March 18, 2026CVE-2025-67963 affects the Movie Booking plugin (up to v1.1.5) with a critical CVSS score of 9.1, allowing unauthenticated file deletion.…
March 18, 2026CVE-2026-22337 is a critical privilege escalation vulnerability in the Directorist Social Login plugin for WordPress, affecting version 2.1.1. Unauthenticated attackers…
March 18, 2026CVE-2025-67953 affects the Booking Activities plugin for WordPress (up to version 1.16.44) with a critical CVSS score of 9.8. Update…
March 18, 2026CVE-2025-14533 affects the Acf Extended plugin for WordPress (up to version 0.9.2.1) with a critical CVSS score of 9.8. Patch…
March 18, 2026CVE-2025-15027 affects the JAY Login Register plugin for WordPress (up to 2.6.03) with a critical CVSS score of 9.8. Update…
March 18, 2026CVE-2026-1499 affects the Local Sync plugin (up to 1.1.8) with a CVSS score of 9.8. This critical file upload vulnerability…
March 18, 2026CVE-2025-68043 affects the Lottiefiles plugin for WordPress (up to 3.0.0), with a critical CVSS score of 9.8. Unauthenticated attackers can…
March 18, 2026CVE-2025-69376 affects the Wp User Extra Fields plugin (up to version 17.0) with a critical CVSS score of 9.8. Unauthenticated…
March 18, 2026CVE-2026-22341 is a critical authentication bypass in the Booked plugin for WordPress, with a CVSS score of 9.8. Users should…
March 18, 2026CVE-2026-1056 affects the Snow Monkey Forms plugin for WordPress (up to 12.0.3) with a critical CVSS score of 9.8. Patch…
March 18, 2026CVE-2025-13374 affects the Kalrav AI Agent plugin (v2.3.3) with a critical CVSS score of 9.8. Unauthenticated file uploads can lead…
