Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
critical
CVE-2026-1490: Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1490 affects the Cleantalk Spam Protect plugin (up to v6.71) with a critical CVSS score of 9.8. This authentication bypass…
CVE-2026-1306: midi-Synth <= 1.1.0 Unauthenticated Arbitrary File Upload via 'export' AJAX Action PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1306 affects the Midi Synth plugin for WordPress, with a critical CVSS score of 9.8. Unauthenticated attackers can exploit a…
CVE-2025-8572: Truelysell Core <= 1.8.7 Unauthenticated Privilege Escalation via Registration PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-8572 affects the Truelysell Core plugin (versions
CVE-2026-1357: Migration, Backup, Staging <= 0.9.123 Unauthenticated Arbitrary File Upload PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1357 affects WPvivid Backup & Migration plugin versions up to 0.9.123, allowing unauthenticated file uploads with a CVSS score of…
CVE-2025-69379: Upload Files Anywhere <= 2.8 Unauthenticated Arbitrary File Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69379 reveals a critical file upload vulnerability in the Wp Upload Files Anywhere plugin (up to v2.8) with a CVSS…
CVE-2026-2991: KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 Unauthenticated Authentication Bypass via Social Login Token PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2991 affects Kivicare Clinic Management System (up to 4.1.2) with a critical CVSS score of 9.8. Unauthenticated attackers can bypass…
CVE-2026-3891: Pix for WooCommerce <= 1.5.0 Unauthenticated Arbitrary File Upload PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-3891 affects the Payment Gateway Pix for WooCommerce plugin (v1.5.0) with a critical CVSS score of 9.8. Unauthenticated file uploads…
CVE-2026-0953: Tutor LMS Pro <= 3.9.5 Authentication Bypass via Social Login PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0953 affects Tutor Pro plugin versions up to 3.9.5, allowing critical authentication bypass (CVSS 9.8). Update to the patched version…
CVE-2025-69411: ionCube Tester Plus <= 1.3 Unauthenticated Arbitrary File Download PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69411 affects the ionCube Tester Plus plugin (v1.3) with a critical CVSS score of 9.1 due to a path traversal…
CVE-2026-2599: Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 Unauthenticated PHP Object Injection via 'download_csv' PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2599 affects the Contact Form Entries plugin (up to 1.4.7) with a critical CVSS score of 9.8 due to a…
←
1
…
7
8
9