October 27, 2026CVE-2025-12974 affects Gravity Forms plugin versions up to 2.9.21.1 with a CVSS score of 8.1. It allows unauthenticated file uploads,…
October 13, 2026CVE-2026-15381 is a high severity SQL injection vulnerability in the WP Google Maps plugin for WordPress, affecting versions up to…
September 21, 2026CVE-2023-41954 affects the Wp User Avatar plugin (up to v4.13.1) with a high severity CVSS score of 7.3. Unauthenticated attackers…
August 16, 2026CVE-2026-14498 affects the Query Wrangler plugin for WordPress, with a high severity CVSS score of 8.8. Users should upgrade to…
August 16, 2026CVE-2026-17123 affects the Royal Elementor Addons plugin (up to v1.7.1064) with a CVSS score of 8.8. Authenticated users can exploit…
August 16, 2026CVE-2026-16099 affects the Podlove Podcasting Plugin for WordPress (up to v4.5.3) with a CVSS score of 8.8. Authenticated users can…
August 16, 2026CVE-2026-15002 affects the Platnosci Online Blue Media plugin for WordPress (up to 5.0.0) with a high severity CVSS score of…
August 15, 2026CVE-2026-10734 affects the Infility Global plugin for WordPress (up to 2.15.21) with a high severity CVSS score of 7.2. Unauthenticated…
August 15, 2026CVE-2026-13424 affects the Bookly Responsive Appointment Booking Tool (up to version 27.7) with a high severity CVSS score of 7.2.…
August 15, 2026CVE-2026-2497 affects the Gallery Plugin for WordPress (up to version 4.7.9) with a CVSS score of 7.2. Authenticated attackers can…
August 15, 2026CVE-2026-17581 affects the Woocommerce Pos plugin (up to 1.9.14) with a CVSS score of 7.2. Authenticated attackers can exploit this…
August 15, 2026CVE-2026-17087 affects WP Travel Engine versions up to 6.8.4, allowing unauthorized access to sensitive booking details. Upgrade to 6.8.5 to…
August 14, 2026CVE-2026-15142 affects the Real Estate Manager Pro plugin (up to v12.8.6) with a CVSS score of 7.5. Authenticated users can…
August 14, 2026CVE-2026-14279 affects the Wholesale Market plugin for WordPress (up to 2.2.2) with a high severity CVSS score of 8.8. Authenticated…
August 14, 2026CVE-2026-16145 affects the Gdpr Compliant Recaptcha For All Forms plugin (up to 5.1) with a high severity CVSS score of…
August 14, 2026CVE-2026-15312 affects the Propovoice plugin (up to version 1.7.8) with a CVSS score of 8.8. Authenticated users can escalate privileges…
August 14, 2026CVE-2026-15965 affects the Maxupload Upload Larger Files Easily plugin (v1.4.0 and earlier) with a high severity CVSS score of 8.8.…
August 14, 2026CVE-2026-15162 affects the Object Sync For Salesforce plugin (v2.2.13) with a CVSS score of 7.5. This high-severity SQL injection allows…
August 14, 2026CVE-2026-14433 affects Meeting Scheduler By Vcita plugin versions up to 4.6.0, with a CVSS score of 7.2. Unauthenticated attackers can…
August 13, 2026CVE-2026-18109 affects W3 Total Cache plugin versions up to 2.10.3 with a CVSS score of 7.2. This high-severity stored XSS…
