March 18, 2026CVE-2026-0911 affects the WordPress Popup plugin (up to version 7.8.9.2) with a CVSS score of 7.5. This high-severity file upload…
March 18, 2026CVE-2026-0807 affects the Frontis Blocks plugin (up to 1.1.6) with a high severity CVSS score of 7.2 due to SSRF…
March 18, 2026CVE-2026-1257 affects the Administrative Shortcodes plugin (up to 0.3.4) with a high severity (CVSS 7.5) Local File Inclusion vulnerability. Patch…
March 18, 2026CVE-2026-24548 affects the Radio Player plugin for WordPress (up to 2.0.91) with a CVSS score of 7.2. This high-severity Server-Side…
March 18, 2026CVE-2025-68848 affects the Amr Cron Manager plugin for WordPress (up to version 2.3) with a high severity CVSS score of…
March 18, 2026CVE-2026-24963 affects the AmeliaBooking plugin (up to v1.2.38) with a high severity CVSS score of 8.8. Authenticated users can escalate…
March 18, 2026CVE-2026-1720 affects the Optin plugin (v1.4.24) with a high severity CVSS score of 8.8. Authenticated attackers can exploit this to…
March 18, 2026CVE-2026-28039 affects wpDataTables plugin version 6.5.0.1, allowing unauthenticated Local File Inclusion with a CVSS score of 8.1. Upgrade to version…
March 18, 2026CVE-2026-1945 affects WPBookit plugin version 1.0.8 with a high severity CVSS score of 7.2. Unauthenticated attackers can exploit a stored…
March 18, 2026CVE-2023-7337 affects the Js Support Ticket plugin (v2.8.2) with a high severity score of 7.5 due to SQL injection risks.…
March 18, 2026CVE-2026-1273 affects the Ultimate Post plugin (v5.0.8) with a high severity score of 7.2. Authenticated attackers can exploit SSRF vulnerabilities.…
March 18, 2026CVE-2026-3132 affects Master Addons Pro (up to v2.1.3) with a CVSS score of 8.8. This high-severity remote code execution vulnerability…
March 18, 2026CVE-2026-1566 affects the LatePoint plugin (up to 5.2.7) with a CVSS score of 8.8, allowing privilege escalation via password reset.…
March 18, 2026CVE-2026-2448 affects the SiteOrigin Panels plugin (up to v2.33.5) with a high severity (CVSS 8.8) local file inclusion vulnerability. Upgrade…
March 18, 2026CVE-2026-3180 affects the Contest Gallery plugin (up to version 28.1.4) with a high severity CVSS score of 7.5 due to…
March 18, 2026CVE-2026-24385 affects the Podlove Web Player plugin (up to version 5.9.1) with a high severity CVSS score of 7.5. Users…
March 18, 2026CVE-2026-2568 affects the Cf7 Zendesk plugin for WordPress (up to version 1.1.5) with a high severity CVSS of 7.2. Update…
March 18, 2026CVE-2026-27984 affects the Widget Options plugin (up to version 4.1.3) with a CVSS score of 8.8. It allows remote code…
March 18, 2026CVE-2026-2269 affects the Uncanny Automator plugin (up to version 7.0.0.3) with a CVSS score of 7.2. Admins should upgrade to…
March 18, 2026CVE-2026-2471 affects WP Mail Logging plugin versions up to 1.15.0, with a CVSS score of 7.5. Unauthenticated attackers can exploit…
