March 18, 2026CVE-2026-2282 affects the Slidorion WordPress plugin (up to v1.0.2) with a medium severity CVSS score of 4.4. Authenticated attackers can…
March 18, 2026CVE-2025-13587 affects the Two Factor 2fa Via Email plugin (up to version 1.9.8) with a medium severity (CVSS 6.5) authentication…
March 18, 2026CVE-2025-12500 affects WooCommerce Checkout Manager (up to 7.8.1) with a medium severity (CVSS 5.3) file upload vulnerability. Update to version…
March 18, 2026CVE-2025-14864 affects the Virusdie plugin (up to 1.1.7) with a CVSS score of 4.3, allowing authenticated users to expose sensitive…
March 18, 2026CVE-2026-23541 affects the Mail Mint plugin for WordPress (up to v1.19.4) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2025-13732 affects the s2Member plugin for WordPress, with a CVSS score of 6.4. Users should update to version 260101 to…
March 18, 2026CVE-2026-2386 affects The Plus Addons for Elementor plugin (up to v6.4.7) with a medium severity (CVSS 4.3). Authenticated attackers can…
March 18, 2026CVE-2025-12081 affects the Navz Photo Gallery plugin (up to v3.0) with a medium severity (CVSS 4.3) vulnerability. Authenticated attackers can…
March 18, 2026CVE-2025-11706 affects the Aruba HiSpeed Cache plugin (up to 3.0.2) with a medium severity CVSS score of 6.1. Unauthenticated attackers…
March 18, 2026CVE-2025-12172 affects the Mailchimp List Subscribe Form plugin (up to v2.0.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Update…
March 18, 2026CVE-2025-12451 affects the Easy SVG Support plugin for WordPress (up to v4.0) with a medium severity CVSS score of 6.1.…
March 18, 2026CVE-2025-11725 affects the Aruba HiSpeed Cache plugin (up to version 3.0.2) with a CVSS score of 6.5. Unauthenticated attackers can…
March 18, 2026CVE-2025-12375 affects the Printful Shipping For WooCommerce plugin (up to v2.2.11) with a medium severity (CVSS 6.4) SSRF vulnerability. Users…
March 18, 2026CVE-2026-1461 affects Simple Membership plugin versions up to 4.7.0, with a CVSS score of 6.5. Unauthenticated attackers can manipulate subscriptions…
March 18, 2026CVE-2025-13079 affects the Popup Builder plugin (up to v4.4.2) with a medium severity CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2026-25375 affects the Final Tiles Grid Gallery Lite plugin (up to version 3.6.10) with a medium severity (CVSS 4.3) vulnerability,…
March 18, 2026CVE-2025-14294 affects Woo Razorpay plugin versions up to 4.7.8, allowing unauthenticated attackers to modify order contact info. Upgrade to 4.7.9…
March 18, 2026CVE-2025-12448 affects Smartsupp Live Chat plugin versions up to 3.9.1, allowing authenticated users to exploit stored XSS. Upgrade to 3.9.2…
March 18, 2026CVE-2026-23545 affects the Aruba HiSpeed Cache plugin for WordPress (up to 3.0.4) with a medium severity (CVSS 5.3) vulnerability allowing…
March 18, 2026CVE-2025-13612 affects the Album And Image Gallery Plus Lightbox plugin (up to 2.1.7) with a medium severity (CVSS 6.4) stored…
