March 18, 2026CVE-2025-13079 affects the Popup Builder plugin (up to v4.4.2) with a medium severity CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2026-25375 affects the Final Tiles Grid Gallery Lite plugin (up to version 3.6.10) with a medium severity (CVSS 4.3) vulnerability,…
March 18, 2026CVE-2025-14983 affects the Advanced Custom Fields Font Awesome plugin (up to 5.0.1) with a medium severity (CVSS 6.4) XSS vulnerability.…
March 18, 2026CVE-2025-14444 affects the Custom Registration Form Builder With Submission Manager plugin (v6.0.6.9) with a medium severity (CVSS 5.3). Patch to…
March 18, 2026CVE-2026-0549 affects the Groups plugin for WordPress (up to version 3.10.0) with a medium severity CVSS score of 6.4. Authenticated…
March 18, 2026CVE-2026-2426 affects WP-DownloadManager plugin (up to v1.69) with a CVSS score of 6.5. This medium-severity path traversal vulnerability allows authenticated…
March 18, 2026CVE-2025-14445 affects the Devvn Image Hotspot plugin (up to v1.2.9) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
March 18, 2026CVE-2025-13842 affects the Breadcrumb NavXT plugin (up to version 7.5.0), allowing unauthorized access to draft and private post data. Update…
March 18, 2026CVE-2025-13113 affects the Accessibe WordPress plugin (up to v2.11) with a medium severity (CVSS 5.3) vulnerability. Unauthenticated users can access…
March 18, 2026CVE-2025-13738 affects the Easy Table Of Contents plugin (up to 2.0.78) with a medium severity (CVSS 6.4) XSS vulnerability. Users…
March 18, 2026CVE-2025-13727 affects the Video Share VOD plugin (up to 2.7.11) with a medium severity CVSS score of 4.4, allowing authenticated…
March 18, 2026CVE-2026-2126 affects the User Submitted Posts plugin (up to 20260113) with a CVSS score of 5.3. Unauthenticated attackers can bypass…
March 18, 2026CVE-2025-11185 affects the Complianz GDPR/CCPA plugin (up to v7.4.3) with a CVSS score of 6.4. Authenticated attackers can exploit stored…
March 18, 2026CVE-2026-1942 affects the Blog2Social plugin (up to v8.7.4) with a CVSS score of 6.5. It allows authenticated users to modify…
March 18, 2026CVE-2025-13048 affects the Official StatCounter Plugin for WordPress (up to 2.1.0) with a medium severity CVSS of 6.4. Users should…
March 18, 2026CVE-2026-1943 affects the YayMail plugin (up to v4.3.2) with a medium severity (CVSS 4.4) stored XSS vulnerability. Users should upgrade…
March 18, 2026CVE-2026-2281 affects the Private Comment plugin for WordPress (up to v0.0.4) with a medium severity CVSS score of 4.4. Admin-level…
March 18, 2026CVE-2026-1807 affects the InteractiveCalculator plugin (v1.0.3) with a medium severity CVSS score of 6.4. Authenticated users can exploit stored XSS…
March 18, 2026CVE-2026-1938 affects YayMail plugin versions up to 4.3.2, allowing authenticated attackers to delete license keys due to a missing authorization…
March 18, 2026CVE-2026-1860 affects the Kali Forms plugin for WordPress (up to version 2.4.8) with a CVSS score of 4.3. Authenticated users…
