Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-1706: All-in-One Video Gallery <= 4.7.1 Reflected Cross-Site Scripting via 'vi' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1706 affects the All In One Video Gallery plugin for WordPress (up to version 4.7.1) with a medium severity score…
CVE-2026-3056: Seraphinite Accelerator <= 2.28.14 Missing Authorization to Authenticated (Subscriber+) Log Clearing PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-3056 affects the Seraphinite Accelerator plugin (up to version 2.28.14) with a medium severity (CVSS 4.3) vulnerability. Update to version…
CVE-2026-22479: Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress <= 2.2.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22479 affects the Easy Post Submission plugin (up to v2.2.0) with a CVSS score of 5.3. It allows unauthorized access…
CVE-2026-22459: WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales <= 1.7.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22459 affects the Easy Sticky Sidebar plugin (up to v1.7.4) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access.…
CVE-2026-1651: Email Subscribers & Newsletters <= 5.9.16 Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1651 affects the Email Subscribers plugin (up to v5.9.16) with a medium severity (CVSS 6.5) SQL injection vulnerability. Upgrade to…
CVE-2026-28073: Wp EMember <= 10.2.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28073 affects the Wp EMember plugin (up to version 10.2.2) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Ensure…
CVE-2026-1336: AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 Missing Authorization to Unauthenticated API Key Modification PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1336 affects Ays Chatgpt Assistant plugin versions up to 2.7.5, allowing unauthorized access to sensitive data. Upgrade to version 2.7.6…
CVE-2026-1487: LatePoint <= 5.2.7 Authenticated (Administrator+) SQL Injection via JSON Import PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1487 affects the LatePoint plugin (up to v5.2.7) with a medium severity (CVSS 6.5) SQL injection vulnerability. Update to v5.2.8…
CVE-2026-2362: WP Accessibility <= 2.3.1 Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2362 affects the WP Accessibility plugin (up to version 2.3.1) with a medium severity (CVSS 6.4) XSS vulnerability. Patch to…
CVE-2026-1305: Japanized for WooCommerce <= 2.8.4 Missing Authorization to Unauthenticated Paidy Order Manipulation PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1305 affects the Woocommerce For Japan plugin (up to 2.8.4) with a medium severity (CVSS 5.3) remote code execution vulnerability.…
CVE-2026-2831: MailArchiver <= 4.5.0 Authenticated (Admininistrator+) SQL Injection via 'logid' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2831 affects the Mailarchiver plugin (up to v4.5.0) with a medium severity score of 4.9. Admin-level users should update to…
CVE-2026-28101: UberSlider MouseInteraction <= 2.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28101 affects the UberSlider MouseInteraction plugin (up to version 2.3) with a medium severity CVSS score of 6.1. Users should…
CVE-2026-28099: UberSlider Ultra <= 2.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28099 affects the UberSlider Ultra plugin for WordPress (up to version 2.3) with a medium severity CVSS score of 6.1.…
CVE-2026-28100: UberSlider PerpetuumMobile <= 2.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28100 affects the UberSlider PerpetuumMobile plugin (up to version 2.3) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Users…
CVE-2026-28102: UberSlider Classic <= 2.5 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28102 affects the UberSlider Classic plugin for WordPress (version 2.5 and earlier) with a medium severity (CVSS 6.1) XSS vulnerability.…
CVE-2026-28072: pixfort Core <= 3.2.22 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28072 affects the Pixfort Core plugin (up to v3.2.22) with a medium severity CVSS score of 6.1 due to reflected…
CVE-2026-28071: pixfort Core <= 3.2.22 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28071 affects the Pixfort Core plugin (up to version 3.2.22) with a medium severity (CVSS 4.3) vulnerability. Authenticated users can…
CVE-2026-28037: EventON <= 4.9.12 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28037 affects the EventON plugin for WordPress (up to 4.9.12) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Ensure…
CVE-2026-28038: Ultimate Addons for WPBakery Page Builder <= 3.21.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-28038 affects the Ultimate VC Addons plugin (up to version 3.21.1) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
CVE-2025-14142: Electric Enquiries <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14142 affects the Electric Enquiries plugin (up to v1.1) with a medium severity (CVSS 6.4) stored XSS vulnerability. Ensure to…
←
1
…
101
102
103
104
105
…
120
→