Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-24542: Term Order <= 2.1.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24542 affects the Wp Term Order plugin (up to version 2.1.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure…
CVE-2026-24544: HD Quiz <= 2.0.9 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24544 affects the HD Quiz plugin (up to version 2.0.9) with a medium severity CVSS score of 4.3. Authenticated users…
CVE-2026-24540: Integrate Google Drive <= 1.5.6 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24540 affects the Integrate Google Drive plugin (up to v1.5.6) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions…
CVE-2026-24379: Job Portal <= 2.4.3 Authenticated (Subscriber+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24379 affects the WP Job Portal plugin (up to v2.4.3) with a medium severity CVSS score of 4.3. Authenticated users…
CVE-2026-24543: Materialis Companion <= 1.3.52 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24543 affects the Materialis Companion plugin for WordPress (up to 1.3.52) with a medium severity (CVSS 4.3). Authenticated users can…
CVE-2026-0862: Save as PDF Plugin by PDFCrowd <= 4.5.5 Reflected Cross-Site Scripting via options PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0862 affects the Save As Pdf By Pdfcrowd plugin for WordPress (up to version 4.5.5) with a medium severity (CVSS…
CVE-2026-24996: WPElemento Importer <= 0.6.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24996 affects the WPElemento Importer plugin (up to v0.6.4) with a medium severity CVSS score of 4.3. Patch to v0.6.5…
CVE-2025-13194: SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 Cross-Site Request Forgery to Survey Renaming PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13194 affects the SurveyJS plugin (up to version 2.5.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure to update…
CVE-2025-13139: SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 Cross-Site Request Forgery to Survey Creation PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13139 affects the SurveyJS plugin (up to v2.5.2) with a CVSS score of 4.3. This medium severity CSRF vulnerability allows…
CVE-2026-1300: Responsive Header Plugin <= 1.0 Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1300 affects the Responsive Header plugin for WordPress (v1.0 and below) with a medium severity (CVSS 4.4) stored XSS vulnerability.…
CVE-2025-13920: WP Directory Kit <= 1.4.9 Unauthenticated Email Exposure via wdk_public_action PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13920 affects the WP Directory Kit plugin (up to v1.4.9) with a CVSS score of 5.3, exposing user emails via…
CVE-2025-13205: SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 Cross-Site Request Forgery to Survey Cloning PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13205 affects the SurveyJS plugin (up to v2.5.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure you update to…
CVE-2026-24539: Protección de datos – RGPD <= 0.68 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24539 affects the Protección de datos – RGPD plugin for WordPress versions up to 0.68, allowing unauthorized access. Update to…
CVE-2026-24541: Download After Email <= 2.1.9 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24541 affects the Download After Email plugin (up to 2.1.9) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access.…
CVE-2026-1266: Postalicious <= 3.0.1 Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1266 affects the Postalicious plugin for WordPress (up to 3.0.1) with a CVSS score of 4.4. Admin-level attackers can exploit…
CVE-2026-1189: LeadBI Plugin for WordPress <= 1.7 Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_id' Shortcode Attribute PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1189 affects the Leadbi plugin for WordPress (up to v1.7) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated…
CVE-2026-1127: Timeline Event History <= 3.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1127 affects the Timeline Event History plugin for WordPress (up to version 3.2) with a medium severity CVSS score of…
CVE-2026-1208: Friendly Functions for Welcart <= 1.2.5 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1208 affects the Friendly Functions For Welcart plugin (up to 1.2.5) with a medium severity CVSS score of 4.3. Update…
CVE-2025-14843: Wizit Gateway for WooCommerce <= 1.2.9 Missing Authentication to Unauthenticated Arbitrary Order Cancellation PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14843 affects the Wizit Gateway for WooCommerce plugin (up to v1.2.9) with a medium severity (CVSS 5.3) remote code execution…
CVE-2026-0806: WP-ClanWars <= 2.0.1 Authenticated (Administrator+) SQL Injection via 'orderby' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0806 affects the WP-ClanWars plugin (up to version 2.0.1) with a medium severity SQL injection vulnerability. Admin-level attackers can exploit…
←
1
…
98
99
100
101
102
…
120
→