March 23, 2026CVE-2025-14037 affects the Invelity Products Feeds plugin (up to v1.2.6) with a high severity CVSS score of 8.1. It allows…
March 23, 2026CVE-2026-3629 affects the Import Users From Csv With Meta plugin (up to v1.29.7) with a CVSS score of 8.1. Unauthenticated…
March 23, 2026CVE-2026-2580 affects the WP Google Map Plugin (up to v4.9.1) with a high severity CVSS score of 7.5. Unauthenticated SQL…
March 23, 2026CVE-2026-4314 affects the Wpextended plugin (up to version 3.2.4) with a CVSS score of 8.8. Authenticated users can escalate privileges…
March 23, 2026CVE-2025-10679 affects the ReviewX plugin for WordPress (up to version 2.2.12) with a CVSS score of 7.3. This high-severity vulnerability…
March 23, 2026CVE-2026-4373 affects JetFormBuilder plugin version 3.5.6.2 with a CVSS score of 7.5. Unauthenticated attackers can exploit a file upload vulnerability…
March 18, 2026CVE-2025-14613 affects the GetContentFromURL plugin (v1.0) with a high severity score of 7.2. Authenticated attackers can exploit this SSRF vulnerability,…
March 18, 2026CVE-2025-15266 affects the Geeky Bot plugin (up to version 1.1.8) with a high severity CVSS score of 7.2 due to…
March 18, 2026CVE-2025-15283 affects the Name Directory plugin for WordPress (up to v1.30.3) with a high severity CVSS score of 7.2. Users…
March 18, 2026CVE-2025-14615 affects the Dashboard Builder plugin (up to v1.5.7) with a CVSS score of 7.1. This high-severity SQL injection vulnerability…
March 18, 2026CVE-2025-15378 affects the AJS Footnotes plugin for WordPress, with a CVSS score of 7.2. This high-severity stored XSS vulnerability allows…
March 18, 2026CVE-2026-22332 affects Tutor Pro plugin versions up to 3.8.3, allowing unauthenticated SQL injection with a CVSS score of 7.5. Users…
March 18, 2026CVE-2025-68905 affects the JNews Pay Writer plugin (up to v11.0.0) with a CVSS score of 7.5. Authenticated attackers can exploit…
March 18, 2026CVE-2026-24608 affects the Laurent Core plugin for WordPress (up to version 2.4.1) with a CVSS score of 7.5. Authenticated attackers…
March 18, 2026CVE-2025-50004 affects the JupiterX Core plugin (up to 4.10.1) with a high severity CVSS score of 7.5. Users should upgrade…
March 18, 2026CVE-2025-69356 affects TheGem Elements for Elementor (up to v5.11.0) with a CVSS score of 7.5. This high-severity vulnerability allows authenticated…
March 18, 2026CVE-2025-14937 affects the Acf Frontend Form Element plugin (up to version 3.28.23) with a CVSS score of 7.2 due to…
March 18, 2026CVE-2025-15055 affects the Wp Slimstat plugin (up to version 5.3.4) with a CVSS score of 7.2. This high-severity XSS vulnerability…
March 18, 2026CVE-2025-15057 affects the Wp Slimstat plugin (up to v5.3.3) with a high severity CVSS score of 7.2. Unauthenticated attackers can…
March 18, 2026CVE-2025-14657 affects the Wp Event Solution plugin (versions ≤4.0.51) with a CVSS score of 7.2. Unauthenticated attackers can exploit this…
