March 18, 2026CVE-2025-13673 affects Tutor LMS versions up to 3.9.6, allowing unauthenticated SQL injection with a CVSS score of 7.5. Upgrade to…
March 18, 2026CVE-2026-1542 affects the Super Stage WP plugin (up to v1.0.1) with a high severity (CVSS 8.1) file upload vulnerability. Update…
March 18, 2026CVE-2026-28115 affects the WP Attractive Donations System plugin (up to v1.25) with a high severity (CVSS 7.5) SQL injection vulnerability.…
March 18, 2026CVE-2026-28133 affects the Filr Protection plugin (v1.2.13 and below) with a CVSS score of 8.8. It allows authenticated users to…
March 18, 2026CVE-2026-28134 affects Jet Engine plugin versions up to 3.7.2, allowing remote code execution for authenticated users. With a CVSS score…
March 18, 2026CVE-2026-2428 affects the Fluent Forms Pro plugin (up to v6.1.17) with a CVSS score of 7.5. It allows unauthenticated attackers…
March 18, 2026CVE-2026-28127 affects the Lawyer Directory plugin for WordPress (up to v1.3.2) with a high severity CVSS score of 7.2 due…
March 18, 2026CVE-2026-23798 affects the PowerPress plugin for WordPress (up to 11.15.10) with a high severity CVSS of 7.5. Authenticated attackers can…
March 18, 2026CVE-2025-69338 affects the Riode Core plugin for WordPress, with a CVSS score of 7.5. This high-severity SQL injection vulnerability allows…
March 18, 2026CVE-2026-23802 reveals a high-severity file upload vulnerability in the Ai Engine plugin (versions up to 3.3.2). Update to 3.3.3 to…
March 18, 2026CVE-2026-22390 affects the Builderall Cheetah For WP plugin (up to version 3.0.1) with a high severity score of 8.8. Authenticated…
March 18, 2026CVE-2026-27379 affects the NextScripts Social Networks Auto-Poster plugin (up to version 4.4.7) with a CVSS score of 7.5. Authenticated attackers…
March 18, 2026CVE-2026-1916 affects the WPGSI: Spreadsheet Integration plugin (up to version 3.8.3) with a high severity CVSS score of 7.5. Patching…
March 18, 2026The Geo Mashup plugin for WordPress, versions up to 1.13.17, has a high-severity SQL injection vulnerability (CVE-2026-2416) due to insufficient…
March 18, 2026CVE-2026-1929 affects the Advanced Woo Labels plugin (up to v2.36) with a CVSS score of 8.8. This high-severity remote code…
March 18, 2026CVE-2026-27363 affects the Vc Autoresponder Addon plugin for WordPress (up to version 1.0.6) with a CVSS score of 7.2. This…
March 18, 2026CVE-2026-27413 affects the Profile Builder Pro plugin (up to v3.13.9) with a CVSS score of 7.5. This high-severity SQL injection…
March 18, 2026CVE-2026-27390 affects the WeDesignTech Ultimate Booking Addon for WordPress, allowing authenticated attackers to bypass authentication. Update to version 1.0.2 to…
March 18, 2026CVE-2026-27541 affects the WooCommerce Wholesale Prices plugin (up to v2.2.6) with a CVSS score of 7.2. Authenticated users can escalate…
March 18, 2026CVE-2025-4521 affects the IDonate plugin (versions 2.1.5 to 2.1.9) with a CVSS score of 8.8. Authenticated users can escalate privileges…
