March 18, 2026CVE-2026-0557 affects the WP Data Access plugin (up to version 5.5.63) with a CVSS score of 6.4. Authenticated users can…
March 18, 2026CVE-2026-0727 affects the Accordion And Accordion Slider plugin (up to v1.4.5) with a medium severity (CVSS 5.4) authentication bypass. Patch…
March 18, 2026CVE-2026-0559 affects the MasterStudy LMS plugin (up to version 3.7.11) with a medium severity CVSS score of 6.4. Patching to…
March 18, 2026CVE-2026-1905 affects the Sphere Manager plugin for WordPress (up to 1.0.2) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2025-14873 affects the LatePoint plugin for WordPress (up to v5.2.5) with a medium severity CVSS score of 4.3. Patching to…
March 18, 2026CVE-2026-1944 affects the Callbackkiller Service Widget plugin for WordPress (v1.2). This medium severity vulnerability allows unauthenticated attackers to modify site…
March 18, 2026CVE-2026-1901 affects the QuestionPro Surveys plugin (v1.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated attackers can inject…
March 18, 2026CVE-2026-1939 affects the Percent To Infograph plugin for WordPress (v1.0) with a CVSS score of 6.4. Authenticated attackers can exploit…
March 18, 2026CVE-2026-1796 affects the StyleBidet WordPress plugin (up to 1.0.0) with a CVSS score of 6.1. This medium severity XSS vulnerability…
March 18, 2026CVE-2026-1904 affects the Simple Wp Colorfull Accordion plugin (up to v1.0) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-1915 affects the Simple Plyr plugin (v0.0.1) with a medium severity score of 6.4. Authenticated users can exploit this cross-site…
March 18, 2026CVE-2026-1754 affects the Personal Authors Category plugin for WordPress (up to v0.3) with a medium severity (CVSS 6.1) XSS vulnerability.…
March 18, 2026CVE-2026-1932 affects the Bookr plugin for WordPress (up to v1.0.2) with a CVSS score of 5.3. Unauthenticated attackers can modify…
March 18, 2026CVE-2026-1187 affects the Tz Zoomifywp Free plugin (v1.1) with a CVSS score of 6.4. This medium severity stored XSS vulnerability…
March 18, 2026CVE-2026-1912 affects the Citations Tools plugin for WordPress (up to v0.3.2) with a CVSS score of 6.4. Authenticated attackers can…
March 18, 2026CVE-2025-13973 affects the Stickeasy Protected Contact Form plugin (up to 1.0.1) with a medium severity CVSS score of 5.3. Update…
March 18, 2026CVE-2026-1983 affects the Simple Event Attendance plugin for WordPress (up to version 1.5.0) with a medium severity CVSS score of…
March 18, 2026CVE-2026-2027 affects the Amp Enhancer plugin (up to v1.0.49) with a CVSS score of 4.4. This medium-severity XSS vulnerability allows…
March 18, 2026CVE-2026-1787 affects the LearnPress Import Export plugin (up to 4.1.0) with a CVSS score of 4.8. Unauthenticated attackers can delete…
March 18, 2026CVE-2025-68495 affects the Jet Engine plugin for WordPress (up to 3.8.0) with a CVSS score of 6.1. This medium-severity reflected…
