March 18, 2026CVE-2026-27370 affects the Chaty plugin for WordPress (up to version 3.5.1) with a CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2026-27373 affects the Tablesome plugin (up to version 1.2.3) with a medium severity CVSS score of 6.5. Authenticated users can…
March 18, 2026CVE-2026-27374 affects the WooCommerce Order Details plugin (up to v3.1) with a medium severity score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2026-25388 affects the Ap Plugin Scripteo (versions up to 5.0) with a medium severity CVSS score of 4.3. Authenticated users…
March 18, 2026CVE-2025-14339 affects the weMail plugin (up to v2.0.7) with a medium severity score of 6.5. Unauthenticated users can delete forms…
March 18, 2026CVE-2026-27386 affects the DesignThemes Directory Addon plugin for WordPress (up to version 1.8) with a medium severity (CVSS 5.3) vulnerability…
March 18, 2026CVE-2026-25384 affects WP Lister For eBay versions up to 3.8.5, allowing unauthorized access due to a missing capability check. Users…
March 18, 2026CVE-2026-25378 affects the Nelio AB Testing plugin for WordPress, with a medium severity CVSS score of 4.9. Users should update…
March 18, 2026CVE-2026-25387 affects the Image Optimization plugin for WordPress (up to 1.7.1) with a CVSS score of 4.3. Update to version…
March 18, 2026CVE-2026-25389 affects the Eventprime Event Calendar Management plugin (up to version 4.2.8.3) with a medium severity (CVSS 5.3) vulnerability allowing…
March 18, 2026CVE-2026-2486 affects the Master Addons plugin for WordPress (up to 2.1.1) with a medium severity CVSS of 6.4. Ensure you…
March 18, 2026CVE-2026-2384 affects the Quiz Maker plugin for WordPress (up to 6.7.1.7) with a medium severity (CVSS 6.4) XSS vulnerability. Update…
March 18, 2026CVE-2026-25386 affects the Pojo Accessibility plugin (versions
March 18, 2026CVE-2026-0722 affects the Wp Simple Firewall plugin (versions
March 18, 2026CVE-2025-13930 affects WooCommerce Checkout Manager versions up to 7.8.5, allowing unauthenticated attackers to delete guest order attachments. Upgrade to version…
March 18, 2026CVE-2026-0556 affects the Xo Event Calendar plugin for WordPress (up to version 3.2.10) with a medium severity (CVSS 6.4) XSS…
March 18, 2026CVE-2025-14851 affects the YaMaps plugin (up to version 0.6.40) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users should…
March 18, 2026CVE-2026-2716 affects the Wp Client Testimonial plugin (up to v2.0) with a medium severity CVSS score of 4.4 due to…
March 18, 2026CVE-2026-2718 reveals a medium severity XSS vulnerability in the Dealia Request A Quote plugin for WordPress, affecting versions up to…
March 18, 2026CVE-2026-25385 affects the URL Shortify plugin (up to version 1.12.3) with a medium severity (CVSS 6.4) SSRF vulnerability. Update to…
