March 18, 2026CVE-2025-68552 affects the Woo Coming Soon Product plugin for WordPress (up to version 5.0) with a CVSS score of 7.5.…
March 18, 2026CVE-2025-14541 affects the Wp Lucky Wheel plugin (up to 1.0.22) with a CVSS score of 7.2. Authenticated attackers can exploit…
March 18, 2026CVE-2025-69383 affects the Wpshop plugin (up to 2.6.1) with a CVSS score of 8.1, allowing unauthenticated attackers to execute arbitrary…
March 18, 2026CVE-2025-69382 affects the Themesflat Elementor plugin (v1.0.1 and earlier) with a CVSS score of 8.1. This high-severity file upload vulnerability…
March 18, 2026CVE-2025-69387 affects the Simple Retail Menus plugin (up to v4.2.1) with a high severity CVSS of 8.1. Unauthenticated attackers can…
March 18, 2026CVE-2025-67991 affects the Wp User Extra Fields plugin (up to version 16.8) with a high severity CVSS score of 7.2…
March 18, 2026CVE-2025-69380 affects the WordPress Upload Files Anywhere plugin (up to version 2.8) with a CVSS score of 7.5. Unauthenticated attackers…
March 18, 2026CVE-2026-2992 affects the Kivicare Clinic Management System plugin (up to version 4.1.2) with a high severity CVSS score of 8.2.…
March 18, 2026CVE-2026-1463 affects NextGEN Gallery plugin (up to v4.0.4) with a high severity CVSS score of 8.8. Authenticated attackers can exploit…
March 18, 2026CVE-2026-3090 affects Post SMTP plugin versions up to 3.8.0 with a CVSS score of 7.2. It allows stored XSS attacks.…
March 18, 2026CVE-2026-3231 affects Woo Checkout Field Editor Pro (up to v2.1.7) with a high severity CVSS score of 7.2. Unauthenticated attackers…
March 18, 2026CVE-2026-1708 affects the Simply Schedule Appointments plugin (versions
March 18, 2026CVE-2026-3657 affects the My Sticky Menu plugin (up to version 2.8.6) with a high severity SQL injection vulnerability (CVSS 7.5).…
March 18, 2026CVE-2026-3045 affects the Simply Schedule Appointments plugin (up to 1.6.9.29) with a CVSS score of 7.5. Unauthenticated users can access…
March 18, 2026CVE-2026-2890 affects the Formidable Forms plugin (up to v6.28) with a high severity (CVSS 7.5) vulnerability allowing payment integrity bypass.…
March 18, 2026CVE-2026-1947 affects the Nex Forms Express WP Form Builder plugin (up to v9.1.9) with a CVSS score of 7.5. Unauthenticated…
March 18, 2026CVE-2026-2413 affects the Pojo Accessibility plugin (up to v4.0.3) with a high severity (CVSS 7.5) SQL injection vulnerability. Update to…
March 18, 2026CVE-2026-3222 affects the WP Google Map Plugin (up to v4.9.1) with a high severity CVSS of 7.5 due to SQL…
March 18, 2026CVE-2026-3496 affects the Jet Booking plugin (up to version 4.0.3) with a high severity score of 7.5. This SQL injection…
March 18, 2026CVE-2026-1992 affects the Google Analytics Dashboard for WP plugin (versions 8.6.0 to 9.0.2) with a CVSS score of 8.8. Patch…
