March 18, 2026CVE-2026-1787 affects the LearnPress Import Export plugin (up to 4.1.0) with a CVSS score of 4.8. Unauthenticated attackers can delete…
March 18, 2026CVE-2025-68495 affects the Jet Engine plugin for WordPress (up to 3.8.0) with a CVSS score of 6.1. This medium-severity reflected…
March 18, 2026CVE-2025-68501 affects the Mollie Payments for WooCommerce plugin (up to version 8.1.1) with a medium severity CVSS score of 6.1.…
March 18, 2026CVE-2026-25036 affects the Content Protector plugin for WordPress (up to version 4.2.25) with a medium severity CVSS score of 4.3.…
March 18, 2026CVE-2026-1537 affects the LatePoint plugin (up to v5.2.6) with a medium severity score of 5.3. Unauthenticated attackers can access sensitive…
March 18, 2026CVE-2025-69394 affects the Cnvrse WordPress plugin (up to version 026.02.10.20) with a medium severity (CVSS 5.3) vulnerability. Unauthenticated attackers can…
March 18, 2026CVE-2026-1356 affects the Webp Converter For Media plugin (up to v6.5.1) with a medium severity CVSS score of 4.8. Unauthenticated…
March 18, 2026CVE-2026-1671 affects the Winterlock plugin (up to 1.2.8) with a CVSS score of 6.5. It allows authenticated users to access…
March 18, 2026CVE-2025-14608 affects the WP Last Modified Info plugin (up to 1.9.5) with a medium severity (CVSS 5.3) vulnerability. Patch to…
March 18, 2026CVE-2025-14067 affects the Easy Form Builder plugin (up to version 3.9.3) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2026-1164 affects the Easy Voice Mail plugin (up to v1.2.5) with a medium severity CVSS score of 6.1. Admin-level users…
March 18, 2026CVE-2026-22351 affects the Wp Fullcalendar plugin (up to version 1.6) with a medium severity score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2025-68514 affects the Paid Member Subscriptions plugin (up to 2.16.8) with a medium severity (CVSS 4.3) vulnerability. Update to version…
March 18, 2026CVE-2026-24959 affects the JS Support Ticket plugin (up to 3.0.1) with a medium severity SQL injection vulnerability (CVSS 6.5). Update…
March 18, 2026CVE-2026-22352 affects the Persian Woocommerce SMS plugin (up to 7.1.1) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Users…
March 18, 2026CVE-2026-2295 affects WPZOOM Elementor Addons plugin version 1.3.2, allowing unauthorized access to draft and pending post data. Upgrade to version…
March 18, 2026CVE-2025-69392 affects the iMoney WordPress plugin (up to version 0.36) with a medium severity CVSS score of 6.1. Users should…
March 18, 2026CVE-2025-69401 affects the Byconsole Woo Order Delivery Time plugin (up to v2.5.2) with a medium severity score of 5.3. Unauthenticated…
March 18, 2026CVE-2025-15400 affects the OpenPix for WooCommerce plugin (up to v2.13.3) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions…
March 18, 2026CVE-2026-22350 affects the PDF for Elementor Forms plugin (up to v6.3.1) with a medium severity (CVSS 4.3) vulnerability. Update to…
