March 18, 2026CVE-2025-14797 affects the Same Category Posts plugin (up to v1.1.19) with a medium severity CVSS score of 5.4. Patch to…
March 18, 2026CVE-2025-14906 affects the WP Youtube Video Gallery plugin (version 1.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure you…
March 18, 2026CVE-2025-14609 affects the Wise Analytics plugin (up to version 1.1.9) with a medium severity score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2026-1084 affects the Cookie Consent For Developers plugin for WordPress (up to v1.7.1) with a medium severity CVSS of 4.4.…
March 18, 2026CVE-2026-1251 affects the SupportCandy plugin (up to v3.4.4) with a CVSS score of 5.4. Authenticated users can exploit this medium-severity…
March 18, 2026CVE-2025-68999 affects the Happy Elementor Addons plugin (up to version 3.20.4) with a medium severity SQL injection vulnerability. Users should…
March 18, 2026CVE-2025-12836 affects the VK Google Job Posting Manager plugin (up to version 1.2.23) with a medium severity (CVSS 6.4) stored…
March 18, 2026CVE-2026-24991 affects the Extensions For CF7 plugin for WordPress (up to version 3.4.0) with a medium severity (CVSS 4.3) IDOR…
March 18, 2026CVE-2026-24994 affects Sunshine Photo Cart plugin versions up to 3.5.7.2, allowing unauthorized access to sensitive image metadata. Upgrade to 3.5.7.3…
March 18, 2026CVE-2025-14629 affects the Alchemist Ajax Upload plugin (up to v1.1) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized deletion…
March 18, 2026CVE-2026-2355 affects the My Calendar plugin (up to version 3.7.3) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
March 18, 2026CVE-2026-3058 affects the Seraphinite Accelerator plugin (up to v2.28.14) with a CVSS score of 4.3. Authenticated users can access sensitive…
March 18, 2026CVE-2026-1706 affects the All In One Video Gallery plugin for WordPress (up to version 4.7.1) with a medium severity score…
March 18, 2026CVE-2026-3056 affects the Seraphinite Accelerator plugin (up to version 2.28.14) with a medium severity (CVSS 4.3) vulnerability. Update to version…
March 18, 2026CVE-2026-22479 affects the Easy Post Submission plugin (up to v2.2.0) with a CVSS score of 5.3. It allows unauthorized access…
March 18, 2026CVE-2026-2292 affects the Morkva UA Shipping plugin (up to v1.7.9) with a medium severity (CVSS 4.4) stored XSS vulnerability. Update…
March 18, 2026CVE-2026-2289 affects the Taskbuilder plugin for WordPress (up to version 5.0.3) with a medium severity (CVSS 4.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-3523 affects the Apocalypse Meow plugin for WordPress (up to v22.1.0) with a medium severity (CVSS 4.9) SQL injection vulnerability.…
March 18, 2026CVE-2026-1980 affects the WPBookit plugin (up to v1.0.8) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access to sensitive…
March 18, 2026CVE-2026-2363 affects the WP-Members Membership Plugin (up to 3.5.5.1) with a medium severity SQL injection (CVSS 6.5). Update to version…
