March 18, 2026CVE-2026-2383 affects the Simple Download Monitor plugin (up to v4.0.5) with a medium severity (CVSS 6.4) cross-site scripting vulnerability. Users…
March 18, 2026CVE-2025-14142 affects the Electric Enquiries plugin (up to v1.1) with a medium severity (CVSS 6.4) stored XSS vulnerability. Ensure to…
March 18, 2026CVE-2026-1558 affects the WP Recipe Maker plugin (up to version 10.3.2) with a medium severity (CVSS 5.3) vulnerability. Users should…
March 18, 2026CVE-2026-28109 affects the All In One ContentSlider plugin for WordPress (up to version 3.8) with a medium severity (CVSS 6.1)…
March 18, 2026CVE-2026-28113 affects the Indeed Learning Pro plugin (v3.9.1) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Ensure to update…
March 18, 2026CVE-2026-28108 affects the All In One ThumbnailsBanner plugin for WordPress, with a medium severity CVSS score of 6.1. Users should…
March 18, 2026CVE-2026-28112 affects the All In One BannerRotator plugin (up to version 3.8) with a medium severity CVSS score of 6.1…
March 18, 2026CVE-2026-28078 affects the uListing WordPress plugin (up to version 2.2.0) with a medium severity CVSS of 4.9. Authenticated attackers can…
March 18, 2026CVE-2026-28135 affects the Royal Elementor Addons plugin (up to v1.7.1049) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access.…
March 18, 2026CVE-2024-10938 affects the Moneytigo plugin (v1.7.0) with a medium severity (CVSS 6.5). Malicious .htaccess files can block legitimate scripts. Update…
March 18, 2026CVE-2025-14149 affects the Xpro Elementor Addons plugin (up to v1.4.24) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated…
March 18, 2026CVE-2026-2499 affects the Custom Logo plugin for WordPress (up to v2.2) with a medium severity (CVSS 4.4) XSS vulnerability. Admins…
March 18, 2026CVE-2025-69343 affects the Theatre plugin for WordPress (up to v0.19) with a medium severity CVSS score of 6.4. Authenticated attackers…
March 18, 2026CVE-2026-27354 affects the Woo Coming Soon Product plugin for WordPress (up to v5.0) with a CVSS score of 6.4. Authenticated…
March 18, 2026CVE-2026-2506 affects the Cost Calculator plugin for WordPress (up to v2.3.1) with a medium severity (CVSS 6.1) stored XSS vulnerability.…
March 18, 2026CVE-2026-23799 affects Tutor LMS plugin versions up to 3.9.5, allowing authenticated users to perform unauthorized actions. Update to version 3.9.6…
March 18, 2026CVE-2026-28103 affects the Lbg_zoominoutslider plugin (up to version 5.4.5) with a medium severity CVSS score of 6.1. Ensure proper input…
March 18, 2026CVE-2026-28104 affects the Site Suggest plugin for WordPress (up to version 1.3.9) with a medium severity CVSS score of 5.3.…
March 18, 2026CVE-2026-28110 affects the All In One BannerWithPlaylist plugin for WordPress, with a CVSS score of 6.1. Users should update from…
March 18, 2026CVE-2026-2694 affects The Events Calendar plugin (up to 6.15.16) with a medium severity (CVSS 5.4) vulnerability. Authenticated users can modify…
