April 6, 2026CVE-2026-32538 affects the SMTP Mailer plugin for WordPress (up to version 1.1.24) with a CVSS score of 7.5. Unauthenticated attackers…
April 6, 2026CVE-2026-32513 affects the Jquery Archive List Widget plugin (up to v6.1.7) with a high severity CVSS score of 7.5. Authenticated…
April 6, 2026CVE-2026-32530 affects the Creator LMS plugin (up to v1.1.18) with a high severity CVSS score of 8.8. Authenticated users can…
April 6, 2026CVE-2026-4350 affects the Perfmatters plugin (up to version 2.5.9.1) with a CVSS score of 8.1. This high-severity file upload vulnerability…
April 6, 2026CVE-2026-32539 affects the Revisionary plugin for WordPress, with a CVSS score of 7.5. Users should update to version 3.7.24 to…
April 6, 2026CVE-2026-31920 affects the Product Rearrange for WooCommerce plugin (up to version 1.2.2) with a CVSS score of 7.5. This high-severity…
April 6, 2026CVE-2026-4302 affects the WowOptin plugin (versions 1.4.29 and earlier) with a high severity CVSS score of 7.2. Patch to version…
April 6, 2026CVE-2026-32484 affects the Weforms plugin (up to 1.6.26) with a high severity CVSS score of 8.1 due to a PHP…
April 6, 2026CVE-2026-25377 reveals a high-severity SQL injection vulnerability in the Addon Jobsearch Chat plugin for WordPress (versions 3.0 and earlier). Unauthenticated…
April 6, 2026CVE-2026-1233 affects the Text To Speech Tts plugin (up to version 1.9.8) with a CVSS score of 7.5. Unauthenticated attackers…
April 1, 2026CVE-2026-4267 affects Query Monitor versions up to 3.20.3, exposing a high severity cross-site scripting vulnerability (CVSS 7.2). Users should upgrade…
April 1, 2026CVE-2026-5130 affects the Debugger Troubleshooter plugin (up to 1.3.2) with a high severity (CVSS 8.8) vulnerability allowing unauthenticated privilege escalation.…
April 1, 2026CVE-2026-4020 affects the Gravity SMTP plugin for WordPress (up to v2.1.4) with a CVSS score of 7.5. This high-severity vulnerability…
April 1, 2026CVE-2026-25371 affects the Lumise Product Designer plugin (up to version 2.0.9) with a high severity SQL injection vulnerability (CVSS 7.5).…
April 1, 2026CVE-2026-32537 affects the Visual Portfolio plugin for WordPress (up to v3.5.1) with a high severity CVSS score of 7.5. It…
April 1, 2026CVE-2026-25346 affects the FAQ Builder AYS plugin (up to version 1.8.2) with a CVSS score of 7.2. This high-severity stored…
March 30, 2026CVE-2026-32499 reveals a high-severity SQL injection vulnerability in the WPBot plugin for WordPress, affecting versions up to 7.7.9. Update to…
March 30, 2026CVE-2026-32494 affects Ays Slider plugin versions up to 2.7.1, with a CVSS score of 7.2. This high-severity stored XSS vulnerability…
March 30, 2026CVE-2026-32523 affects WPJAM Basic plugin versions up to 6.9.2 with a CVSS score of 8.8. Authenticated attackers can exploit a…
March 30, 2026CVE-2026-32536 affects the Halfdata Paypal Green Downloads plugin (up to v2.08) with a CVSS score of 8.8. This high-severity file…
