March 18, 2026CVE-2026-24955 affects Whizz Plugins for WordPress (v1.9 and below) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Users should…
March 18, 2026CVE-2025-67993 affects Atarim Visual Collaboration plugin versions up to 4.2.1, with a CVSS score of 5.3. Patch to version 4.2.2…
March 18, 2026CVE-2026-1948 affects the Nex Forms Express WP Form Builder plugin (up to version 9.1.9) with a medium severity (CVSS 4.3).…
March 18, 2026CVE-2026-1870 affects the Thim Elementor Kit plugin (up to version 1.3.7) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2026-2512 affects the Simple Embed Code plugin (up to v2.5.1) with a CVSS score of 6.4. This medium severity cross-site…
March 18, 2026CVE-2026-1780 affects the Crpaid Link Manager plugin for WordPress, with a medium severity CVSS score of 6.1. Users should upgrade…
March 18, 2026CVE-2026-1217 affects the Yoast Duplicate Post plugin (up to v4.5) with a medium severity (CVSS 5.4) vulnerability. Users should upgrade…
March 18, 2026CVE-2026-4268 affects WP Google Maps plugin versions up to 10.0.05, with a CVSS score of 6.4. Authenticated users can exploit…
March 18, 2026CVE-2026-3512 affects the Writeprint Stylometry plugin (v0.1) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Ensure to patch or…
March 18, 2026CVE-2026-1926 affects the Subscriptions For WooCommerce plugin (up to v1.9.2) with a CVSS score of 5.3. This medium severity remote…
March 18, 2026CVE-2026-2373 affects the Royal Elementor Addons plugin (v1.7.1049) with a medium severity (CVSS 5.3) vulnerability allowing remote code execution. Users…
March 18, 2026CVE-2026-2233 affects the Wp User Frontend plugin (up to v4.2.8) with a CVSS score of 5.3. It allows unauthorized data…
March 18, 2026CVE-2026-4063 affects the Social Icons Widget By WPZOOM plugin (up to version 4.5.8) with a medium severity (CVSS 4.3). Update…
March 18, 2026CVE-2026-1883 affects the Wicked Folders plugin (up to version 4.1.0) with a medium severity (CVSS 4.3) vulnerability allowing authenticated users…
March 18, 2026CVE-2026-3492 affects Gravity Forms versions up to 2.9.28.1, with a CVSS score of 6.4. It allows authenticated users to exploit…
March 18, 2026CVE-2026-1704 affects the Simply Schedule Appointments plugin (up to 1.6.9.29) with a medium severity (CVSS 4.3). Authenticated users can access…
March 18, 2026CVE-2026-2987 affects the Simple Ajax Chat plugin for WordPress, allowing stored cross-site scripting in versions up to 20260217. Users should…
March 18, 2026CVE-2026-2888 affects the Formidable plugin (up to version 6.28) with a medium severity (CVSS 5.3) CSRF vulnerability. Update to version…
March 18, 2026CVE-2026-2879 affects the Getgenie plugin (up to version 4.3.2) with a medium severity (CVSS 5.4) vulnerability. Update to 4.3.3 to…
March 18, 2026CVE-2026-3986 affects the Calculated Fields Form plugin (v5.4.5.0) with a medium severity (CVSS 6.4) cross-site scripting vulnerability. Users should upgrade…
