March 18, 2026CVE-2026-2724 affects Unlimited Elements For Elementor (up to v2.0.5) with a CVSS score of 7.2. This high-severity XSS vulnerability allows…
March 18, 2026CVE-2026-1454 affects the Lead Form Builder plugin for WordPress (up to v2.0.1) with a CVSS score of 7.2. Ensure you…
March 18, 2026CVE-2026-3178 affects the Name Directory plugin (up to 1.32.1) with a high severity CVSS score of 7.2 due to stored…
March 18, 2026CVE-2025-13067 affects the Royal Elementor Addons plugin (up to v1.7.1049) with a high severity (CVSS 8.8) file upload vulnerability. Update…
March 18, 2026CVE-2026-3453 affects the Wp User Avatar plugin (up to version 4.16.11) with a CVSS score of 8.1. Authenticated users can…
March 18, 2026CVE-2026-2413 affects the Pojo Accessibility plugin (up to v4.0.3) with a high severity (CVSS 7.5) SQL injection vulnerability. Update to…
March 18, 2026CVE-2026-3222 affects the WP Google Map Plugin (up to v4.9.1) with a high severity CVSS of 7.5 due to SQL…
March 18, 2026CVE-2026-1074 affects the WP App Bar plugin (up to version 1.5) with a CVSS score of 7.2. This high-severity stored…
March 18, 2026CVE-2025-14675 affects the Meta Box plugin (up to v5.11.1) with a high severity score of 7.2. Patching to v5.11.2 is…
March 18, 2026CVE-2026-3585 affects The Events Calendar plugin (up to 6.15.17) with a CVSS score of 7.5. This high-severity file upload vulnerability…
March 18, 2026CVE-2026-1261 affects Metform Pro plugin versions up to 3.9.6, posing a high severity risk (CVSS 7.2) due to stored XSS…
March 18, 2026CVE-2026-2020 affects the Jquery Archive List Widget plugin (up to 6.1.7) with a high severity (CVSS 7.5) PHP Object Injection…
March 18, 2026CVE-2025-14353 affects the Zip Code Based Content Protection plugin for WordPress (up to v1.0.2) with a CVSS score of 7.5.…
March 18, 2026CVE-2025-8899 affects the Ppv Live Webcams plugin (up to v7.3.20) with a high severity (CVSS 8.8) privilege escalation vulnerability. Authenticated…
March 18, 2026CVE-2026-27095 affects the Bus Ticket Booking With Seat Reservation plugin (up to 5.6.2) with a CVSS score of 8.1. This…
March 18, 2026CVE-2026-3459 affects the Drag And Drop Multiple File Upload Contact Form 7 plugin, with a CVSS score of 8.1. Update…
March 18, 2026CVE-2026-3352 affects Easy Php Settings plugin versions up to 1.0.4, allowing PHP code injection with a CVSS score of 7.2.…
March 18, 2026CVE-2026-2365 affects Fluent Forms Pro (up to 6.1.17) with a CVSS score of 7.2. Unauthenticated attackers can exploit stored XSS…
March 18, 2026CVE-2026-22484 affects the Lisfinity Core plugin (v1.5.0) with a CVSS score of 7.5. This high-severity SQL injection vulnerability allows unauthenticated…
March 18, 2026CVE-2026-22485 affects the My Album Gallery plugin (v1.0.4) with a high severity (CVSS 8.1) file upload vulnerability, allowing authenticated users…
