Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
high
CVE-2025-15491: Post Slides <= 1.0.1 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-15491 affects the Post Slides plugin for WordPress (v1.0.1 and earlier) with a high severity CVSS score of 7.5. Unauthenticated…
CVE-2025-14478: Demo Importer Plus <= 2.0.9 Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-14478 affects the Demo Importer Plus plugin (up to v2.0.9) with a high severity CVSS of 7.5. Authenticated attackers can…
CVE-2025-13062: Supreme Modules Lite <= 2.5.62 Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-13062 affects the Supreme Modules For Divi plugin (up to v2.5.62) with a high severity CVSS score of 8.8. Authenticated…
CVE-2025-12957: All-in-One Video Gallery <= 4.5.7 Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-12957 affects the All In One Video Gallery plugin (up to v4.5.7) with a high severity CVSS of 8.8. Authenticated…
CVE-2025-68034: CleverReach® WP <= 1.5.21 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-68034 reveals a high-severity SQL injection vulnerability in the CleverReach WP plugin (up to 1.5.21). Update to 1.5.22 to mitigate…
CVE-2025-68898: Synergy Project Manager <= 1.5 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-68898 affects the Synergy Project Manager plugin for WordPress (up to version 1.5) with a CVSS score of 7.2. Unauthenticated…
CVE-2025-68041: Omnichannel for WooCommerce <= 1.3.65 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-68041 affects the Codistoconnect plugin for WordPress (up to version 1.3.65) with a CVSS score of 7.2. Unauthenticated attackers can…
CVE-2025-68864: Infility Global <= 2.14.49 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-68864 affects the Infility Global plugin (up to version 2.14.49) with a CVSS score of 7.2. This high-severity XSS vulnerability…
CVE-2025-14770: Shipping Rate By Cities <= 2.0.0 Unauthenticated SQL Injection via 'city' Parameter PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-14770 affects the Shipping Rate By Cities plugin (up to v2.0.0) with a CVSS score of 7.5, exposing users to…
CVE-2025-12166: Simply Schedule Appointments <= 1.6.9.9 Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-12166 affects the Simply Schedule Appointments plugin (up to 1.6.9.9) with a CVSS score of 7.5. This high-severity SQL injection…
CVE-2026-3658: Appointment Booking Calendar <= 1.6.10.0 Unauthenticated SQL Injection via 'fields' Parameter PoC, Patch Analysis & Rule
March 23, 2026
CVE-2026-3658 affects the Simply Schedule Appointments plugin for WordPress with a CVSS score of 7.5. This high-severity SQL injection vulnerability…
CVE-2026-27070: Everest Forms Pro <= 1.9.10 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 23, 2026
CVE-2026-27070 affects the Everest Forms Pro plugin for WordPress, with a high severity rating of 7.2. Users should update to…
CVE-2026-1238: SlimStat Analytics <= 5.3.5 Unauthenticated Stored Cross-Site Scripting via 'fh' PoC, Patch Analysis & Rule
March 23, 2026
CVE-2026-1238 affects the WP SlimStat plugin with a high severity score of 7.2. It allows unauthenticated attackers to execute scripts…
CVE-2026-25452: Remoji – Post/Comment Reaction and Enhancement <= 2.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 23, 2026
CVE-2026-25452 affects the Remoji plugin for WordPress, with a CVSS score of 7.2. This high-severity stored XSS vulnerability allows attackers…
CVE-2026-27065: BuilderPress <= 2.0.1 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
March 23, 2026
CVE-2026-27065 affects the BuilderPress plugin for WordPress with a high severity CVSS score of 8.1. Unauthenticated attackers can exploit this…
CVE-2026-2626: Divi Booster < 5.0.2 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
March 23, 2026
CVE-2026-2626 affects the Divi Booster plugin for WordPress, with a high severity CVSS score of 8.1. Unauthenticated attackers can exploit…
CVE-2026-27067: Mobile App Editor – WordPress to Android App Builder <= 1.3.1 Authenticated (Editor+) Arbitrary File Upload PoC, Patch Analysis & Rule
March 23, 2026
CVE-2026-27067 affects the Mobile App Editor plugin, rated high with a CVSS of 7.2. Authenticated attackers can exploit a file…
CVE-2025-62126: Varnish/Nginx Proxy Caching <= 1.8.3 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-62126 affects the Vcaching plugin for WordPress (up to version 1.8.3) with a CVSS score of 7.5. Unauthenticated attackers can…
CVE-2025-68865: Infility Global <= 2.14.49 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-68865 affects the Infility Global plugin for WordPress (up to version 2.14.49) with a CVSS score of 7.5. This high-severity…
CVE-2025-62139: Terms descriptions <= 3.4.9 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 23, 2026
CVE-2025-62139 affects the Terms Descriptions plugin for WordPress (up to v3.4.9) with a CVSS score of 7.5. Unauthenticated attackers can…
←
1
…
20
21
22
23
24
…
36
→