March 18, 2026CVE-2025-14452 affects WP Customer Reviews plugin versions up to 3.7.5, allowing reflected XSS due to poor input sanitization. Upgrade to…
March 18, 2026CVE-2025-12975 affects the Webappick Product Feed For Woocommerce plugin (up to v6.6.11) with a CVSS of 7.2. This high-severity remote…
March 18, 2026CVE-2025-13603 affects the WP Audio Gallery plugin (up to v2.0) with a CVSS score of 8.8. It allows authenticated attackers…
March 18, 2026CVE-2026-0974 affects the Orderable plugin (up to v1.20.0) with a CVSS score of 8.8. It allows authenticated users to install…
March 18, 2026CVE-2026-0912 affects the Toret Manager plugin (up to 1.2.7) with a high severity CVSS score of 8.8. It allows authenticated…
March 18, 2026CVE-2026-23549 affects the Mage Eventpress plugin (up to version 5.1.1) with a high severity score of 8.1 due to a…
March 18, 2026CVE-2026-1581 affects wpForo plugin versions up to 2.4.14 with a high severity CVSS score of 7.5. Users should upgrade to…
March 18, 2026CVE-2025-11754 affects the GDPR Cookie Consent plugin (v4.1.2) with a CVSS score of 7.5. Unauthenticated attackers can access sensitive data.…
March 18, 2026CVE-2026-2232 affects the Wc Product Table Lite plugin (up to v4.6.2) with a CVSS score of 7.5. This high-severity SQL…
March 18, 2026CVE-2025-15041 affects the BackWPup plugin (versions 5.0.0 to 5.6.2) with a CVSS score of 7.2. This high-severity vulnerability allows authenticated…
March 18, 2026CVE-2025-12707 affects the Library Management System plugin for WordPress (up to v3.2.1) with a CVSS score of 7.5. Unauthenticated SQL…
March 18, 2026CVE-2025-12845 affects the Tablesome plugin (versions 0.5.4 to 1.2.1) with a CVSS score of 8.8. It allows authenticated users to…
March 18, 2026CVE-2026-2495 reveals a high severity SQL injection vulnerability in the WPNakama plugin for WordPress, affecting versions up to 0.6.5. Patching…
March 18, 2026CVE-2026-2019 affects the Woo Cart All In One plugin (v1.1.21 and below) with a CVSS score of 7.2. It allows…
March 18, 2026CVE-2026-2296 affects Woo Custom Product Addons plugin version 3.1.0, allowing remote code execution due to insufficient input validation. Upgrade to…
March 18, 2026CVE-2026-1931 affects the Rentfetch plugin (up to v0.32.6) with a high severity CVSS of 7.2 due to stored XSS. Users…
March 18, 2026CVE-2026-2576 affects the Business Directory Plugin for WordPress (up to version 6.4.21) with a CVSS score of 7.5. Patch to…
March 18, 2026CVE-2026-1714 affects the Woolentor Addons plugin for WordPress (up to version 3.3.2), allowing unauthenticated email relay abuse. Patch to version…
March 18, 2026CVE-2026-22354 affects the Banner Management For Woocommerce plugin (up to v2.5.1) with a high severity CVSS of 7.5. Authenticated attackers…
March 18, 2026CVE-2026-2001 affects the WowRevenue plugin for WordPress (up to version 2.1.3) with a CVSS score of 8.8. Authenticated users can…
