Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-2479: Responsive Lightbox & Gallery <= 2.7.1 Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2479 affects the Responsive Lightbox plugin (up to 2.7.1) with a medium severity (CVSS 5.0) SSRF vulnerability. Update to version…
CVE-2026-1614: Rise Blocks – A Complete Gutenberg Page Builder <= 3.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributes PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1614 affects the Rise Blocks plugin (up to v3.7) with a CVSS score of 6.4. Authenticated attackers can exploit stored…
CVE-2026-2367: Secure Copy Content Protection and Content Locking <= 5.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2367 affects the Secure Copy Content Protection plugin (up to 5.0.1) with a medium severity (CVSS 6.4) XSS vulnerability. Update…
CVE-2025-14742: WP Recipe Maker <= 10.2.3 Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14742 affects the WP Recipe Maker plugin (up to version 10.2.3) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
CVE-2026-2301: Post Duplicator <= 3.0.8 Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2301 affects the Post Duplicator plugin (up to version 3.0.8) with a medium severity (CVSS 4.3) vulnerability. Patch to version…
CVE-2026-27362: Bakery Autoresponder Addon <= 1.0.6 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27362 affects the Vc Autoresponder Addon plugin for WordPress (up to version 1.0.6) with a medium severity CVSS score of…
CVE-2026-27344: Scientific and Interactive Blocks – inseri core <= 1.0.5 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27344 affects the Inseri Core plugin for WordPress (up to version 1.0.5) with a medium severity CVSS score of 5.3.…
CVE-2026-2410: Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 Cross-Site Request Forgery to Plugin Settings Update PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2410 affects the Disable Admin Notices plugin (up to v1.4.2) with a medium severity CVSS score of 4.3. Update to…
CVE-2026-27361: Responsive Posts Carousel WordPress Plugin <= 15.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27361 affects the Responsive Posts Carousel Pro plugin (up to v15.1) with a CVSS score of 5.3. Unauthenticated attackers can…
CVE-2025-69340: WeDesignTech Ultimate Booking Addon <= 1.0.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69340 affects the WeDesignTech Ultimate Booking Addon plugin (up to v1.0.3) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
CVE-2026-27359: Awa Plugins <= 1.4.4 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27359 affects Awa Plugins for WordPress (up to version 1.4.4) with a medium severity CVSS score of 6.1. Patching is…
CVE-2026-23546: Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 Authenticated (Subscriber+) Sensitive Data Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-23546 affects the Classified Listing plugin for WordPress (up to version 5.3.4) with a CVSS score of 4.3. Authenticated users…
CVE-2026-27385: DesignThemes Portfolio <= 1.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27385 affects the DesignThemes Portfolio plugin (up to version 1.3) with a medium severity CVSS score of 6.1. Users should…
CVE-2026-27370: Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty <= 3.5.1 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27370 affects the Chaty plugin for WordPress (up to version 3.5.1) with a CVSS score of 5.3. Unauthenticated attackers can…
CVE-2026-27373: Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.3 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27373 affects the Tablesome plugin (up to version 1.2.3) with a medium severity CVSS score of 6.5. Authenticated users can…
CVE-2026-27374: WooCommerce Order Details <= 3.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27374 affects the WooCommerce Order Details plugin (up to v3.1) with a medium severity score of 5.3. Unauthenticated attackers can…
CVE-2026-2385: The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 Unauthenticated Email Relay PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2385 affects The Plus Addons For Elementor Page Builder (up to 6.4.7) with a CVSS score of 5.3. It allows…
CVE-2026-27388: DesignThemes Booking Manager <= 2.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27388 affects the DesignThemes Booking Manager plugin (up to version 2.0) with a CVSS score of 5.3. Unauthenticated attackers can…
CVE-2026-27411: SiteGuard WP Plugin <= 1.7.9 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27411 affects SiteGuard plugin versions up to 1.7.9, allowing unauthorized access due to a missing capability check. Users should patch…
CVE-2026-27406: My Tickets – Accessible Event Ticketing <= 2.1.0 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27406 affects the My Tickets plugin for WordPress (up to v2.1.0) with a medium severity CVSS score of 5.3. Unauthenticated…
←
1
…
103
104
105
106
107
…
120
→