March 29, 2026CVE-2026-3124 affects the Download Monitor plugin (up to 5.1.7) with a CVSS score of 7.5. Unauthenticated attackers can exploit this…
March 29, 2026CVE-2026-2468 affects the Quentn WP plugin (up to version 1.2.12) with a high severity SQL injection vulnerability (CVSS 7.5). Ensure…
March 29, 2026CVE-2026-3003 affects the Vagaro Booking Widget plugin (up to version 0.3) with a CVSS score of 7.2. This high-severity stored…
March 29, 2026CVE-2026-3368 affects the Injection Guard plugin for WordPress (up to 1.2.9) with a CVSS score of 7.2. This high-severity XSS…
March 29, 2026CVE-2026-2941 affects the Linksy Search And Replace plugin (v1.0.4) with a high severity CVSS score of 8.8. It allows authenticated…
March 29, 2026CVE-2026-4261 affects the Expire Users plugin for WordPress, allowing authenticated users to escalate privileges to Administrator. With a CVSS score…
March 29, 2026CVE-2026-32524 affects the Wplr Sync plugin (up to version 6.4.9) with a CVSS score of 8.8. Authenticated attackers can exploit…
March 28, 2026CVE-2026-3478 affects the Content Syndication Toolkit plugin (up to v1.3) with a high severity CVSS score of 7.2. Unauthenticated SSRF…
March 28, 2026CVE-2026-1648 affects the Performance Monitor plugin (up to v1.0.6) with a CVSS score of 7.2. This high-severity SSRF vulnerability allows…
March 25, 2026CVE-2026-3334 affects the CMS Commander Client plugin (up to v2.288) with a CVSS score of 8.8. This high-severity SQL injection…
March 25, 2026CVE-2026-1800 affects the Fonts Manager Custom Fonts plugin for WordPress (up to version 1.2) with a high severity CVSS score…
March 25, 2026CVE-2026-2279 affects the myLinksDump plugin for WordPress, with a CVSS score of 7.2. This high-severity SQL injection vulnerability allows authenticated…
March 25, 2026CVE-2026-1313 affects the Mimetypes Link Icons plugin for WordPress (up to v3.2.20) with a CVSS score of 8.3. Authenticated users…
March 25, 2026CVE-2026-2440 affects the SurveyJS plugin for WordPress (up to version 2.5.3) with a CVSS score of 7.2. This high-severity stored…
March 24, 2026CVE-2026-4662 affects the Jet Engine plugin for WordPress (up to version 3.8.6.1) with a CVSS score of 7.5. This high-severity…
March 24, 2026CVE-2026-4306 affects the WP Job Portal plugin (up to v2.4.8) with a high severity CVSS score of 7.5. This SQL…
March 24, 2026CVE-2026-3533 affects the Jupiter X Core plugin (up to 4.14.1) with a CVSS score of 8.8. Authenticated users can exploit…
March 24, 2026CVE-2026-4021 affects the Contest Gallery plugin (up to 28.1.5) with a CVSS score of 8.1. This high-severity authentication bypass allows…
March 23, 2026CVE-2025-14478 affects the Demo Importer Plus plugin (up to v2.0.9) with a high severity CVSS of 7.5. Authenticated attackers can…
March 23, 2026CVE-2025-68017 affects the Antideo Email Validator plugin (versions up to 1.0.10) with a high severity SQL injection vulnerability (CVSS 7.5).…
