March 18, 2026CVE-2026-1499 affects the Local Sync plugin (up to 1.1.8) with a CVSS score of 9.8. This critical file upload vulnerability…
March 18, 2026CVE-2025-68043 affects the Lottiefiles plugin for WordPress (up to 3.0.0), with a critical CVSS score of 9.8. Unauthenticated attackers can…
March 18, 2026CVE-2025-69376 affects the Wp User Extra Fields plugin (up to version 17.0) with a critical CVSS score of 9.8. Unauthenticated…
March 18, 2026CVE-2026-22341 is a critical authentication bypass in the Booked plugin for WordPress, with a CVSS score of 9.8. Users should…
March 18, 2026CVE-2026-1056 affects the Snow Monkey Forms plugin for WordPress (up to 12.0.3) with a critical CVSS score of 9.8. Patch…
March 18, 2026CVE-2025-13374 affects the Kalrav AI Agent plugin (v2.3.3) with a critical CVSS score of 9.8. Unauthenticated file uploads can lead…
March 18, 2026CVE-2026-22460 affects the Formgent plugin (v1.4.2 and below) with a critical CVSS score of 9.1. Unauthenticated attackers can delete arbitrary…
March 18, 2026CVE-2026-2628 affects the Login With Azure plugin (up to version 2.2.5) with a critical CVSS score of 9.8. Unauthenticated attackers…
March 18, 2026CVE-2026-1492 affects the User Registration plugin for WordPress (up to version 5.1.2) with a critical CVSS score of 9.8. Update…
March 18, 2026CVE-2026-27983 affects the LMS Elementor Pro plugin (up to version 1.0.4) with a critical CVSS score of 9.8, allowing unauthenticated…
March 18, 2026CVE-2026-27389 is a critical authentication bypass vulnerability in the WeDesignTech Ultimate Booking Addon for WordPress, with a CVSS score of…
March 18, 2026CVE-2026-27384 affects W3 Total Cache plugin (up to 2.9.1) with a critical CVSS score of 9.8. Unauthenticated remote code execution…
March 18, 2026CVE-2026-27540 affects the WooCommerce Wholesale Lead Capture plugin (up to 2.0.3.1) with a critical CVSS score of 9.8. Unauthenticated attackers…
March 18, 2026CVE-2026-27542 affects the WooCommerce Wholesale Lead Capture plugin (up to version 2.0.3.1) with a critical CVSS score of 9.8. Unauthenticated…
March 18, 2026CVE-2026-1994 affects the s2Member plugin for WordPress, allowing unauthenticated attackers to escalate privileges and take over accounts. Update to version…
March 18, 2026CVE-2026-1405 affects the Slider Future plugin (v1.0.5 and earlier) with a critical CVSS score of 9.8 due to an unauthenticated…
March 18, 2026CVE-2025-13563 affects the Lizza LMS Pro plugin for WordPress, allowing unauthenticated users to gain admin access. With a CVSS score…
March 18, 2026CVE-2026-0926 affects Prodigy Commerce plugin versions up to 3.3.0, allowing unauthenticated local file inclusion with a CVSS score of 9.8.…
March 18, 2026CVE-2025-12882 affects the Clasifico Listing plugin for WordPress (up to version 2.0) with a critical CVSS score of 9.8. Unauthenticated…
March 18, 2026CVE-2026-1937 affects YayMail plugin versions up to 4.3.2 with a critical CVSS score of 9.8. Authenticated attackers can exploit this…
