March 18, 2026CVE-2026-1941 affects the WP Event Aggregator plugin (up to v1.8.7) with a CVSS score of 6.4. Authenticated users can exploit…
March 18, 2026CVE-2026-1656 affects the Business Directory Plugin for WordPress (up to v6.4.20) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2026-1655 affects the Eventprime Event Calendar Management plugin (up to 4.2.8.4) with a medium severity (CVSS 4.3) vulnerability. Patch to…
March 18, 2026CVE-2026-2112 affects the Dam Spam plugin for WordPress (up to version 1.0.8) with a CVSS score of 4.3. It allows…
March 18, 2026CVE-2026-1649 affects the Community Events plugin for WordPress (up to 1.5.7) with a medium severity CVSS score of 4.4. Admins…
March 18, 2026CVE-2026-2127 affects the SiteOrigin Widgets Bundle plugin (up to v1.70.4) with a medium severity (CVSS 5.4) remote code execution vulnerability.…
March 18, 2026CVE-2026-2633 affects Kadence Blocks plugin versions up to 3.6.1, allowing authenticated users to upload arbitrary images. Update to 3.6.2 to…
March 18, 2026CVE-2025-12075 affects the Woo Order Splitter plugin (up to v5.3.5) with a medium severity (CVSS 4.3) vulnerability allowing authenticated users…
March 18, 2026CVE-2026-1304 affects the Restrict Content plugin (up to v3.2.18) with a medium severity CVSS score of 4.4. Admins should upgrade…
March 18, 2026CVE-2025-12122 affects the Popup Box plugin (up to v3.2.12) with a medium severity CVSS score of 6.4. Authenticated users can…
March 18, 2026CVE-2025-12356 affects the Tickera Event Ticketing System plugin (versions
March 18, 2026CVE-2025-12071 affects the Frontend User Notes plugin for WordPress (up to 2.1.0) with a CVSS score of 4.3. Authenticated users…
March 18, 2026CVE-2025-11737 affects the VK All In One Expansion Unit plugin for WordPress (up to 9.112.3) with a CVSS score of…
March 18, 2026CVE-2026-1639 affects the Taskbuilder plugin (up to v5.0.2) with a medium severity SQL injection vulnerability (CVSS 6.5). Users should upgrade…
March 18, 2026CVE-2026-2023 affects the WP Plugin Info Card plugin (up to version 6.2.0) with a medium severity CVSS score of 4.3.…
March 18, 2026CVE-2026-1906 affects WooCommerce PDF Invoices & Packing Slips plugin versions up to 5.6.0. This medium severity vulnerability allows authenticated attackers…
March 18, 2026CVE-2026-1072 affects the Wp Keybase Verification plugin (up to v1.4.5) with a medium severity CVSS score of 4.3 due to…
March 18, 2026CVE-2026-1640 affects the Taskbuilder plugin (up to v5.0.2) with a medium severity (CVSS 4.3) authentication bypass. Update to v5.0.3 to…
March 18, 2026CVE-2026-1666 affects the Download Manager plugin (up to v3.3.46) with a medium severity CVSS score of 6.1 due to reflected…
March 18, 2026CVE-2026-1857 affects Kadence Blocks plugin versions up to 3.6.1, with a CVSS score of 4.3. Authenticated users can exploit this…
