March 18, 2026CVE-2025-69383 affects the Wpshop plugin (up to 2.6.1) with a CVSS score of 8.1, allowing unauthenticated attackers to execute arbitrary…
March 18, 2026CVE-2025-69382 affects the Themesflat Elementor plugin (v1.0.1 and earlier) with a CVSS score of 8.1. This high-severity file upload vulnerability…
March 18, 2026CVE-2025-69387 affects the Simple Retail Menus plugin (up to v4.2.1) with a high severity CVSS of 8.1. Unauthenticated attackers can…
March 18, 2026CVE-2025-67991 affects the Wp User Extra Fields plugin (up to version 16.8) with a high severity CVSS score of 7.2…
March 18, 2026CVE-2026-2992 affects the Kivicare Clinic Management System plugin (up to version 4.1.2) with a high severity CVSS score of 8.2.…
March 18, 2026CVE-2026-1463 affects NextGEN Gallery plugin (up to v4.0.4) with a high severity CVSS score of 8.8. Authenticated attackers can exploit…
March 18, 2026CVE-2026-3090 affects Post SMTP plugin versions up to 3.8.0 with a CVSS score of 7.2. It allows stored XSS attacks.…
March 18, 2026CVE-2026-2890 affects the Formidable Forms plugin (up to v6.28) with a high severity (CVSS 7.5) vulnerability allowing payment integrity bypass.…
March 18, 2026CVE-2026-1947 affects the Nex Forms Express WP Form Builder plugin (up to v9.1.9) with a CVSS score of 7.5. Unauthenticated…
March 18, 2026CVE-2026-3231 affects Woo Checkout Field Editor Pro (up to v2.1.7) with a high severity CVSS score of 7.2. Unauthenticated attackers…
March 18, 2026CVE-2026-1708 affects the Simply Schedule Appointments plugin (versions
March 18, 2026CVE-2026-3657 affects the My Sticky Menu plugin (up to version 2.8.6) with a high severity SQL injection vulnerability (CVSS 7.5).…
March 18, 2026CVE-2026-3045 affects the Simply Schedule Appointments plugin (up to 1.6.9.29) with a CVSS score of 7.5. Unauthenticated users can access…
March 18, 2026CVE-2026-2724 affects Unlimited Elements For Elementor (up to v2.0.5) with a CVSS score of 7.2. This high-severity XSS vulnerability allows…
March 18, 2026CVE-2026-1454 affects the Lead Form Builder plugin for WordPress (up to v2.0.1) with a CVSS score of 7.2. Ensure you…
March 18, 2026CVE-2026-3178 affects the Name Directory plugin (up to 1.32.1) with a high severity CVSS score of 7.2 due to stored…
March 18, 2026CVE-2025-13067 affects the Royal Elementor Addons plugin (up to v1.7.1049) with a high severity (CVSS 8.8) file upload vulnerability. Update…
March 18, 2026CVE-2026-3453 affects the Wp User Avatar plugin (up to version 4.16.11) with a CVSS score of 8.1. Authenticated users can…
March 18, 2026CVE-2026-2413 affects the Pojo Accessibility plugin (up to v4.0.3) with a high severity (CVSS 7.5) SQL injection vulnerability. Update to…
March 18, 2026CVE-2026-3222 affects the WP Google Map Plugin (up to v4.9.1) with a high severity CVSS of 7.5 due to SQL…
