March 18, 2026CVE-2025-14436 affects the WooCommerce Sendinblue Newsletter Subscription plugin (v4.0.49 and below) with a high severity CVSS score of 7.2 due…
March 18, 2026CVE-2025-22725 affects the Virtual Assistant plugin for WordPress (up to version 3.0) with a high severity CVSS score of 7.2.…
March 18, 2026CVE-2025-49055 affects the Wp Lead Capture plugin (v2.5) with a CVSS score of 7.5. This high-severity SQL injection allows unauthenticated…
March 18, 2026CVE-2025-23993 affects the Felan Framework plugin for WordPress (up to v1.1.3) with a high severity (CVSS 7.5) SQL injection vulnerability.…
March 18, 2026CVE-2025-12551 affects the ListingHub plugin for WordPress (up to 1.2.6) with a CVSS score of 7.2. This high-severity stored XSS…
March 18, 2026CVE-2026-22521 affects the Handmade Framework plugin for WordPress (up to v3.9) with a high severity CVSS score of 7.5. Authenticated…
March 18, 2026CVE-2025-14070 reveals a high-severity vulnerability in the Review For Discount plugin (up to 1.0.7) allowing authenticated users to create unauthorized…
March 18, 2026CVE-2025-13801 affects the Yoco Payment Gateway plugin (up to version 3.9.0) with a high severity CVSS score of 7.5. Unauthenticated…
March 18, 2026CVE-2025-15158 affects the WP Enable WebP plugin (version 1.0) with a CVSS score of 8.8, allowing authenticated attackers to upload…
March 18, 2026CVE-2025-11877 affects the User Activity Log plugin (v2.2) with a high severity CVSS score of 7.5. Unauthenticated attackers can exploit…
March 18, 2026CVE-2025-13493 affects the Latest Registered Users plugin for WordPress (up to v1.4), allowing unauthorized data export of user details. This…
March 18, 2026CVE-2025-13371 affects the Money Space plugin (versions
March 18, 2026CVE-2026-0656 affects the iPaymu For WooCommerce plugin (up to v2.0.2) with a CVSS score of 8.2. This high-severity vulnerability allows…
March 18, 2026CVE-2025-14835 affects the WP Photo Album Plus plugin (up to version 9.1.05.008) with a high severity CVSS score of 7.1…
March 18, 2026CVE-2026-24635 affects the EduBlink Core plugin (up to v2.0.7) with a CVSS score of 7.5. This high-severity vulnerability allows authenticated…
March 18, 2026CVE-2025-14997 affects the BuddyPress Xprofile Custom Field Types plugin (v1.2.8) with a high severity (CVSS 7.2) file upload vulnerability. Upgrade…
March 18, 2026CVE-2025-67923 affects the Jet Engine plugin (up to version 3.7.7) with a CVSS score of 7.2. This high-severity XSS vulnerability…
March 18, 2026The Download Manager plugin for WordPress (up to version 3.3.40) has a high severity vulnerability (CVE-2025-15364, CVSS 7.3) allowing unauthenticated…
March 18, 2026CVE-2026-22464 affects the My Auctions Allegro Free Edition plugin (up to 3.6.33) with a CVSS score of 7.5. Authenticated attackers…
March 18, 2026CVE-2025-67928 affects the Automotive Listings plugin for WordPress (up to version 18.6) with a CVSS score of 7.5. Unauthenticated SQL…
