April 6, 2026CVE-2026-5425 affects the Social Photo Feed Widget plugin (up to v1.7.9) with a CVSS score of 7.2. Unauthenticated attackers can…
April 6, 2026CVE-2026-2936 affects the Visitors Traffic Real Time Statistics plugin for WordPress, with a CVSS score of 7.2. Upgrade to version…
April 6, 2026CVE-2026-3445 affects the ProfilePress plugin (up to 4.16.11) with a CVSS score of 7.1, allowing authenticated users to bypass payment…
April 6, 2026CVE-2026-4896 affects the WCFM – Frontend Manager plugin for WordPress (up to version 6.7.25) with a CVSS score of 8.1.…
April 6, 2026CVE-2026-25328 affects the Products File Upload for WooCommerce plugin (up to v2.2.4) with a CVSS score of 8.1. It allows…
April 6, 2026CVE-2026-32573 affects the Nelio A/B Testing plugin (up to version 8.2.7) with a high severity score of 7.2. Authenticated attackers…
April 6, 2026CVE-2026-25443 affects Woo Blocker Lite version 2.3.3, allowing unauthenticated attackers to execute remote code with a CVSS score of 7.5.…
April 6, 2026CVE-2026-25017 affects the NaturaLife Extensions plugin for WordPress (up to version 2.1) with a high severity CVSS score of 8.1.…
April 6, 2026CVE-2026-25445 affects Wishlist Member plugin versions up to 3.29.0, with a CVSS score of 7.5. Authenticated attackers can exploit a…
April 6, 2026CVE-2026-25435 affects the Booking Calendar plugin (up to version 3.2.36) with a CVSS score of 7.2. This high-severity XSS vulnerability…
April 6, 2026CVE-2026-25429 affects the Nexa Blocks plugin (up to version 1.1.1) with a high severity CVSS score of 8.1 due to…
April 6, 2026CVE-2026-24989 affects the SUMO Affiliates Pro plugin (up to version 11.4.0) with a high severity CVSS score of 8.1 due…
April 6, 2026CVE-2026-25446 affects the Wishlist Member plugin for WordPress (up to 3.29.0) with a CVSS score of 8.8. This high-severity file…
April 6, 2026CVE-2026-24378 affects the Eventprime Event Calendar Management plugin (up to v4.2.8.0) with a high severity CVSS score of 8.1. Patch…
April 6, 2026CVE-2026-24993 affects the Webd Woocommerce Advanced Reporting Statistics plugin (up to v4.1.3) with a high severity SQL injection vulnerability (CVSS…
April 6, 2026CVE-2026-25447 affects the Widget Wrangler plugin for WordPress, allowing remote code execution for authenticated users in versions up to 2.3.9.…
April 6, 2026CVE-2026-0686 affects the Webmention plugin for WordPress (up to version 5.6.2) with a CVSS score of 7.2. Update to version…
April 6, 2026CVE-2026-5032 affects W3 Total Cache plugin versions up to 2.9.3 with a CVSS score of 7.5. It allows remote code…
April 6, 2026CVE-2026-32526 affects Woo Abandoned Cart Recovery plugin versions up to 1.1.10, with a CVSS score of 7.2. Unauthenticated attackers can…
April 6, 2026CVE-2026-4347 affects MW WP Form plugin versions up to 5.1.0, with a CVSS score of 8.1. This high-severity file upload…
