March 18, 2026CVE-2025-69310 affects the Woodly Core plugin for WordPress (up to v1.4) with a CVSS score of 7.5. This high-severity SQL…
March 18, 2026CVE-2026-1280 affects Nmedia User File Uploader (up to v23.5) with a high severity CVSS score of 7.5. Unauthenticated attackers can…
March 18, 2026CVE-2025-69366 affects the Emerce Core plugin for WordPress (up to version 1.8) with a CVSS score of 7.5. This high-severity…
March 18, 2026CVE-2025-69365 affects the Uroan Core plugin for WordPress (up to version 1.4.4) with a high severity CVSS score of 7.5…
March 18, 2026CVE-2025-69309 affects the Saasplate Core plugin for WordPress (up to version 1.2.8) with a CVSS score of 7.5. This high-severity…
March 18, 2026CVE-2026-0844 affects the Wp Registration plugin (up to version 6.7) with a CVSS score of 8.8. Authenticated users can escalate…
March 18, 2026CVE-2025-14386 affects the Metasync plugin (versions 2.4.4 to 2.5.12) with a CVSS score of 8.8. This high-severity authentication bypass allows…
March 18, 2026CVE-2025-69304 affects the Allmart Core plugin (version 1.1) with a high severity CVSS score of 7.5. Unauthenticated SQL injection can…
March 18, 2026CVE-2025-14610 affects Tablemaster for Elementor (up to 1.3.6) with a CVSS score of 7.2. Authenticated users can exploit SSRF to…
March 18, 2026CVE-2026-0832 affects the New User Approve plugin (up to v3.2.2) with a CVSS score of 7.3. Unauthenticated attackers can exploit…
March 18, 2026CVE-2026-1400 affects the Ai Engine plugin (up to v3.3.2) with a CVSS score of 7.2. This high-severity file upload vulnerability…
March 18, 2026CVE-2025-14316 affects the AhaChat Messenger Marketing plugin (v1.1) with a high severity CVSS score of 7.2. Unauthenticated stored XSS allows…
March 18, 2026CVE-2025-68844 affects the Membees Member Login Widget (up to 2.3.6) with a high severity CVSS score of 7.2. Patch to…
March 18, 2026CVE-2025-67972 reveals a high severity XSS vulnerability in the Prague Plugins for WordPress (up to version 2.2.8). Unauthenticated attackers can…
March 18, 2026CVE-2026-0702 affects the Vidshop For WooCommerce plugin (up to version 1.1.4) with a high severity SQL injection vulnerability (CVSS 7.5).…
March 18, 2026CVE-2025-69305 affects the Crete Core WordPress plugin (up to version 1.4.3) with a CVSS score of 7.5. This high-severity SQL…
March 18, 2026CVE-2025-68531 affects Modeltheme Addons for WPBakery versions up to 1.5.6, with a CVSS score of 7.5. Authenticated attackers can exploit…
March 18, 2026CVE-2026-24390 affects the Kentha Elementor plugin (up to version 3.1) with a CVSS score of 7.5. It allows authenticated users…
March 18, 2026CVE-2026-24538 affects the Omnipress plugin for WordPress (up to v1.6.7) with a high severity (CVSS 7.5) authentication bypass vulnerability. Patching…
March 18, 2026CVE-2026-0800 affects the User Submitted Posts plugin for WordPress, with a CVSS score of 7.2. Users should upgrade to version…
