March 18, 2026CVE-2026-22336 affects the Directorist Booking plugin (up to v2.4.1) with a CVSS score of 7.5. This high-severity SQL injection allows…
March 18, 2026CVE-2026-22850 affects Koko Analytics plugin versions up to 2.1.2 with a high severity score of 7.5. Unauthenticated SQL injection can…
March 18, 2026CVE-2025-67947 affects the Adforest Elementor plugin (up to v3.0.11) with a CVSS score of 7.2. This high-severity stored XSS vulnerability…
March 18, 2026CVE-2025-67945 affects the Woo Mailerlite plugin (up to v3.1.2) with a CVSS score of 7.5 due to SQL injection vulnerabilities.…
March 18, 2026CVE-2025-67944 affects the Nelio A/B Testing plugin (up to 8.1.8) with a CVSS score of 7.2. Authenticated users can exploit…
March 18, 2026CVE-2025-67943 reveals a high-severity XSS vulnerability in the My Auctions Allegro Free Edition plugin (up to 3.6.32). Update to version…
March 18, 2026CVE-2025-69312 affects the Xpro Elementor Addons plugin (up to version 1.4.19.1) with a CVSS score of 8.8. Authenticated attackers can…
March 18, 2026CVE-2025-14977 affects Dokan Lite plugin versions up to 4.2.4, allowing authenticated attackers to exploit a high-severity remote code execution flaw.…
March 18, 2026CVE-2025-69295 reveals a high-severity SQL injection vulnerability in the Coven Core plugin for WordPress, affecting versions up to 1.3. Users…
March 18, 2026CVE-2024-11976 affects BuddyPress plugin versions up to 14.3.3, allowing unauthenticated remote code execution with a CVSS score of 7.3. Update…
March 18, 2026CVE-2025-14866 affects the Melapress Role Editor plugin (up to 1.1.1) with a CVSS score of 8.8. Authenticated users can escalate…
March 18, 2026CVE-2025-15100 affects the Jay Login Register plugin for WordPress, versions 2.6.03 and earlier, with a CVSS score of 8.8. Users…
March 18, 2026CVE-2025-69374 affects the Ele Blog plugin for WordPress (up to 2.0.3) with a high severity CVSS score of 8.1. This…
March 18, 2026CVE-2025-69375 affects the Swp Portfolio plugin (up to v1.2.5) with a high severity CVSS score of 8.1. This authentication bypass…
March 18, 2026CVE-2025-67990 affects the Gmap Targeting plugin for WordPress (up to version 1.1.7) with a CVSS score of 7.2. Users should…
March 18, 2026CVE-2025-69377 affects the Wp User Extra Fields plugin (up to v17.0) with a high CVSS of 8.1. Authenticated attackers can…
March 18, 2026CVE-2025-69378 affects the Prdctfltr plugin for WordPress, allowing authenticated attackers to escalate privileges to Administrator level. Users should update from…
March 18, 2026CVE-2025-13192 affects the Popup Builder Block plugin (up to v2.2.0) with a high severity SQL injection vulnerability (CVSS 8.2). Update…
March 18, 2026CVE-2026-1294 affects the All In One Image Viewer Block plugin (up to 1.0.2) with a high severity CVSS score of…
March 18, 2026CVE-2025-68841 affects the Topper Pack plugin for WordPress (up to v1.2.1) with a CVSS score of 8.1. This high-severity Local…
