March 18, 2026CVE-2026-1904 affects the Simple Wp Colorfull Accordion plugin (up to v1.0) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-1915 affects the Simple Plyr plugin (v0.0.1) with a medium severity score of 6.4. Authenticated users can exploit this cross-site…
March 18, 2026CVE-2026-1754 affects the Personal Authors Category plugin for WordPress (up to v0.3) with a medium severity (CVSS 6.1) XSS vulnerability.…
March 18, 2026CVE-2026-1932 affects the Bookr plugin for WordPress (up to v1.0.2) with a CVSS score of 5.3. Unauthenticated attackers can modify…
March 18, 2026CVE-2026-1187 affects the Tz Zoomifywp Free plugin (v1.1) with a CVSS score of 6.4. This medium severity stored XSS vulnerability…
March 18, 2026CVE-2026-1164 affects the Easy Voice Mail plugin (up to v1.2.5) with a medium severity CVSS score of 6.1. Admin-level users…
March 18, 2026CVE-2025-13681 affects the BFG Tools Extension Zipper plugin (up to v1.0.7) with a medium severity (CVSS 4.9) path traversal vulnerability.…
March 18, 2026CVE-2026-2608 affects the Kadence Blocks plugin (up to 3.5.32) with a medium severity CVSS score of 4.3. Authenticated attackers can…
March 18, 2026CVE-2026-1787 affects the LearnPress Import Export plugin (up to 4.1.0) with a CVSS score of 4.8. Unauthenticated attackers can delete…
March 18, 2026CVE-2025-68495 affects the Jet Engine plugin for WordPress (up to 3.8.0) with a CVSS score of 6.1. This medium-severity reflected…
March 18, 2026CVE-2025-68501 affects the Mollie Payments for WooCommerce plugin (up to version 8.1.1) with a medium severity CVSS score of 6.1.…
March 18, 2026CVE-2026-25036 affects the Content Protector plugin for WordPress (up to version 4.2.25) with a medium severity CVSS score of 4.3.…
March 18, 2026CVE-2026-1537 affects the LatePoint plugin (up to v5.2.6) with a medium severity score of 5.3. Unauthenticated attackers can access sensitive…
March 18, 2026CVE-2025-69394 affects the Cnvrse WordPress plugin (up to version 026.02.10.20) with a medium severity (CVSS 5.3) vulnerability. Unauthenticated attackers can…
March 18, 2026CVE-2026-1356 affects the Webp Converter For Media plugin (up to v6.5.1) with a medium severity CVSS score of 4.8. Unauthenticated…
March 18, 2026CVE-2026-1671 affects the Winterlock plugin (up to 1.2.8) with a CVSS score of 6.5. It allows authenticated users to access…
March 18, 2026CVE-2025-14608 affects the WP Last Modified Info plugin (up to 1.9.5) with a medium severity (CVSS 5.3) vulnerability. Patch to…
March 18, 2026CVE-2025-14067 affects the Easy Form Builder plugin (up to version 3.9.3) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2025-69063 affects the New User Approve plugin for WordPress, versions up to 3.2.0, with a medium severity CVSS score of…
March 18, 2026CVE-2026-22351 affects the Wp Fullcalendar plugin (up to version 1.6) with a medium severity score of 5.3. Unauthenticated attackers can…
