March 18, 2026CVE-2025-67911 affects the Newsletters Lite plugin for WordPress (up to v4.11) with a CVSS score of 8.1. This high-severity file…
March 18, 2026CVE-2025-69292 affects the WP Membership plugin (up to v1.6.4) with a high severity CVSS score of 8.8, allowing privilege escalation…
March 18, 2026CVE-2025-68047 affects the Wp Event Solution plugin (up to version 4.1.3) with a CVSS score of 7.5. Authenticated users can…
March 18, 2026CVE-2025-69183 affects the Hospital Doctor Directory plugin (up to v1.3.9) with a CVSS score of 8.8. Authenticated users can escalate…
March 18, 2026CVE-2025-69293 reveals a high-severity privilege escalation vulnerability in the Final User WordPress plugin (up to v1.2.5). Authenticated users can gain…
March 18, 2026CVE-2025-67964 affects the Homey Core plugin for WordPress (up to version 2.4.3) with a high severity CVSS score of 7.2…
March 18, 2026CVE-2025-69182 affects the Institutions Directory plugin (v1.3.4 and earlier) with a high severity CVSS score of 8.8, allowing privilege escalation…
March 18, 2026CVE-2025-67955 affects the Myhome Core plugin for WordPress (up to v4.1.0) with a high severity CVSS score of 8.1. This…
March 18, 2026CVE-2026-1235 affects the Wp E Commerce plugin (up to 3.15.1) with a high severity CVSS score of 8.1. This file…
March 18, 2026CVE-2025-69319 affects Beaver Builder Lite up to version 2.9.4.1, allowing remote code execution for authenticated users. Upgrade to 2.9.4.2 to…
March 18, 2026CVE-2025-68857 affects the Paid Downloads plugin for WordPress, with a high severity CVSS score of 7.5. Unauthenticated SQL injection vulnerabilities…
March 18, 2026CVE-2025-67966 affects the Lawyer Directory plugin for WordPress (up to v1.3.3) with a CVSS score of 8.8. Authenticated users can…
March 18, 2026CVE-2025-69318 affects the JobWP plugin (up to v2.4.5) with a CVSS score of 7.2 due to stored XSS vulnerabilities. Update…
March 18, 2026CVE-2025-67960 affects the Workscout Core plugin (up to 1.7.06) with a CVSS score of 7.2. This high-severity stored XSS vulnerability…
March 18, 2026CVE-2025-15347 affects the Creator LMS plugin (up to v1.1.12) with a CVSS score of 8.8. This high-severity vulnerability allows authenticated…
March 18, 2026CVE-2026-0726 affects the Nexter Extension plugin for WordPress (up to 4.4.6) with a high severity CVSS score of 8.1. Patch…
March 18, 2026CVE-2025-15380 affects NotificationX plugin versions up to 3.2.0, with a CVSS score of 7.2. This high-severity XSS vulnerability allows attackers…
March 18, 2026CVE-2025-67957 affects the Listivo Core plugin (up to version 2.3.77) with a high severity CVSS score of 8.1. This authentication…
March 18, 2026CVE-2025-68866 affects the Dinatur plugin for WordPress (up to version 1.18) with a high severity CVSS score of 7.2. Unauthenticated…
March 18, 2026CVE-2025-67968 reveals a high severity file upload vulnerability in the RealHomes CRM plugin for WordPress, allowing authenticated users to upload…
