Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
high
CVE-2025-12062: WP Maps <= 4.8.6 Authenticated (Subscriber+) Limited Local File Inclusion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-12062 affects the WP Google Map Plugin (up to v4.8.6) with a high severity CVSS score of 8.8. Patch to…
CVE-2025-69337: Wolmart Core <= 1.9.6 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69337 affects the Wolmart Core plugin (up to version 1.9.6) with a high severity SQL injection vulnerability (CVSS 7.5). Unauthenticated…
CVE-2026-1426: Advanced AJAX Product Filters <= 3.1.9.6 Authenticated (Author+) PHP Object Injection via Live Composer Compatibility PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1426 affects the Woocommerce Ajax Filters plugin (up to v3.1.9.6) with a high severity CVSS score of 8.8. Patch to…
CVE-2026-2592: Zarinpal Gateway for WooCommerce <= 5.0.16 Improper Access Control to Payment Status Update PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2592 affects Zarinpal WooCommerce Payment Gateway (up to 5.0.16) with a CVSS score of 7.7. This high-severity flaw allows unauthenticated…
CVE-2026-1216: RSS Aggregator <= 5.0.10 Reflected Cross-Site Scripting via 'template' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1216 affects the Wp Rss Aggregator plugin (up to version 5.0.10) with a high severity CVSS score of 7.2 due…
CVE-2026-22384: Applay Shortcodes <= 3.7 Authenticated (Contributor+) PHP Object Injection PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22384 affects the Applay Shortcodes plugin (v3.7) with a high severity CVSS score of 7.5. Authenticated attackers can exploit a…
CVE-2026-1843: Super Page Cache <= 5.2.2 Unauthenticated Stored Cross-Site Scripting via Activity Log PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1843 affects the Wp Cloudflare Page Cache plugin (up to version 5.2.2) with a high severity XSS vulnerability (CVSS 7.2).…
CVE-2026-1750: Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1750 affects the Ecwid Shopping Cart plugin (up to version 7.0.7) with a CVSS score of 8.8. This high-severity remote…
CVE-2026-22356: Jetpack CRM <= 6.7.0 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22356 affects the Zero Bs Crm plugin (up to v6.7.0) with a high severity CVSS score of 8.1. This authentication…
CVE-2026-0745: User Language Switch <= 1.6.10 Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0745 affects the User Language Switch plugin (up to v1.6.10) with a high severity CVSS score of 7.2. Authenticated attackers…
CVE-2026-1988: Flexi Product Slider and Grid for WooCommerce <= 1.0.5 Authenticated (Contributor+) Local File Inclusion via 'theme' Shortcode Attribute PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1988 affects the Flexi Product Slider Grid plugin (v1.0.5) with a CVSS score of 7.5. Authenticated attackers can exploit this…
CVE-2026-0753: Super Simple Contact Form <= 1.6.2 Reflected Cross-Site Scripting via 'sscf_name' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0753 affects the Super Simple Contact Form plugin (up to v1.6.2) with a high severity CVSS score of 7.2 due…
CVE-2025-15157: Starfish Review Generation & Marketing for WordPress <= 3.1.19 Authenticated (Subscriber+) Arbitrary Options Update via srm_restore_options_defaults PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-15157 affects the Starfish Reviews plugin (up to v3.1.19) with a CVSS score of 8.8. This high-severity vulnerability allows authenticated…
CVE-2026-0692: BlueSnap Payment Gateway for WooCommerce <= 3.4.0 Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0692 affects the BlueSnap Payment Gateway for WooCommerce plugin (up to version 3.4.0) with a CVSS score of 7.5. Patch…
CVE-2026-2144: Magic Login Mail or QR Code <= 2.05 Unauthenticated Privilege Escalation via Insecure QR Code File Storage PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2144 affects the Magic Login Mail plugin (v2.05) with a CVSS score of 8.1. This high-severity vulnerability allows unauthenticated attackers…
CVE-2026-2024: PhotoStack Gallery <= 0.4.1 Unauthenticated SQL Injection via 'postid' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2024 affects the PhotoStack Gallery plugin (up to v0.4.1) with a CVSS score of 7.5. This high-severity SQL injection allows…
CVE-2026-1316: Customer Reviews for WooCommerce <= 5.97.0 Unauthenticated Stored Cross-Site Scripting via media[].href Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1316 affects the Customer Reviews for WooCommerce plugin (up to v5.97.0) with a high severity CVSS score of 7.2. Patch…
CVE-2026-1320: Secure Copy Content Protection and Content Locking <= 4.9.8 Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1320 affects the Secure Copy Content Protection plugin (up to v4.9.8) with a high severity CVSS score of 7.2 due…
CVE-2026-1841: PixelYourSite <= 11.2.0 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1841 affects the PixelYourSite plugin (up to v11.2.0) with a CVSS score of 7.2, allowing stored XSS attacks. Users should…
CVE-2026-1844: PixelYourSite PRO <= 12.4.0.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1844 affects the PixelYourSite Pro plugin (up to version 12.4.0.2) with a high severity CVSS of 7.2 due to stored…
←
1
…
30
31
32
33
34
…
36
→