March 18, 2026CVE-2026-1404 affects the Ultimate Member plugin (versions
March 18, 2026CVE-2026-25370 affects the Wp Compress Image Optimizer plugin (up to version 6.60.28) with a CVSS score of 5.3. Unauthenticated attackers…
March 18, 2026CVE-2025-14799 affects the Mailin plugin for WordPress (up to version 3.3.0) with a medium severity CVSS score of 6.5. Unauthenticated…
March 18, 2026CVE-2026-2230 affects the Booking Calendar plugin (up to v10.14.14) with a medium severity (CVSS 4.3) IDOR vulnerability. Authenticated users can…
March 18, 2026CVE-2026-3075 affects the Simple Ajax Chat plugin (up to version 20251121) with a CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2026-1277 affects the Url Shortify plugin for WordPress (versions
March 18, 2026CVE-2025-6460 affects the Display During Conditional Shortcode plugin (up to v1.2) with a medium severity (CVSS 6.4) XSS vulnerability. Update…
March 18, 2026CVE-2025-13959 affects the Filepicker Media Uploader plugin (up to 2.0.8) with a CVSS score of 6.4. Authenticated attackers can exploit…
March 18, 2026CVE-2026-1296 affects Frontend Post Submission Manager Lite versions up to 1.2.7 with a medium severity (CVSS 6.1) open redirection vulnerability.…
March 18, 2026CVE-2025-12037 affects the WP 404 Auto Redirect to Similar Post plugin (up to v1.0.5) with a CVSS score of 4.4.…
March 18, 2026CVE-2026-1925 affects the Emailkit plugin (up to v1.6.2) with a CVSS score of 4.3, allowing authenticated users to modify post…
March 18, 2026CVE-2026-1317 affects WP Ultimate CSV Importer (up to v7.37) with a medium severity (CVSS 6.5) SQL injection vulnerability. Users should…
March 18, 2026CVE-2026-22357 affects the Link Whisper plugin for WordPress (up to version 0.9.0) with a medium severity CVSS score of 6.1.…
March 18, 2026CVE-2026-25368 affects the Calculated Fields Form plugin for WordPress (up to version 5.4.4.1) with a medium severity CVSS score of…
March 18, 2026CVE-2026-25363 affects the FooGallery plugin (up to v3.1.11) with a medium severity CVSS score of 4.3. Authenticated attackers can exploit…
March 18, 2026CVE-2025-68002 affects the Open User Map plugin (up to v1.4.16) with a medium severity (CVSS 6.5) path traversal vulnerability. Users…
March 18, 2026CVE-2025-8781 affects the Bookster WordPress plugin (up to v2.1.1) with a medium severity score of 4.9. Administrators should upgrade to…
March 18, 2026CVE-2026-2002 affects the Forminator plugin (up to version 1.50.2) with a medium severity CVSS score of 4.4. Admins should patch…
March 18, 2026CVE-2026-1657 reveals a medium severity file upload vulnerability in the Eventprime Event Calendar Management plugin (up to 4.2.8.4). Users should…
March 18, 2026CVE-2026-0829 affects the Nmedia User File Uploader plugin (up to version 23.5) with a medium severity (CVSS 5.3) vulnerability allowing…
