Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-69388: Cliengo – Chatbot <= 3.0.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69388 affects the Cliengo plugin (up to v3.0.4) with a CVSS score of 4.3. It allows authenticated users to perform…
CVE-2025-67994: YayCurrency <= 3.3 Missing Authorization to Unauthenticated Arbitrary Post Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67994 affects the Yaycurrency plugin (up to v3.3) with a medium severity (CVSS 5.3) vulnerability allowing remote code execution. Update…
CVE-2025-69325: Primer MyData for Woocommerce <= 4.2.8 Unauthenticated Path Traversal PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69325 affects the Primer MyData plugin for WordPress (versions
CVE-2025-69381: WooCommerce Bulk Product Editor <= 3.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69381 affects the WooCommerce Quick Product Editor plugin (up to v3.0) with a medium severity (CVSS 4.3) remote code execution…
CVE-2026-24955: Whizz Plugins <= 1.9 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24955 affects Whizz Plugins for WordPress (v1.9 and below) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Users should…
CVE-2025-67993: Atarim <= 4.2.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67993 affects Atarim Visual Collaboration plugin versions up to 4.2.1, with a CVSS score of 5.3. Patch to version 4.2.2…
CVE-2025-69384: Timeline Event History <= 3.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69384 affects the Timeline Event History plugin for WordPress (up to version 3.2) with a medium severity CVSS score of…
CVE-2026-24953: Simple File List <= 6.1.15 Authenticated (Subscriber+) Arbitrary File Download PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24953 affects the Simple File List plugin (up to 6.1.15) with a medium severity (CVSS 6.5) path traversal vulnerability. Update…
CVE-2026-0996: Fluent Forms <= 6.1.14 Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0996 affects the Fluent Forms plugin (up to v6.1.14) with a CVSS score of 6.4. This medium-severity XSS vulnerability allows…
CVE-2026-1948: NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 Missing Authorization to Authenticated (Subscriber+) License Deactivation via deactivate_license PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1948 affects the Nex Forms Express WP Form Builder plugin (up to version 9.1.9) with a medium severity (CVSS 4.3).…
CVE-2026-1870: Thim Kit for Elementor <= 1.3.7 Missing Authorization to Unauthenticated Private Course Disclosure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1870 affects the Thim Elementor Kit plugin (up to version 1.3.7) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
CVE-2026-2512: Code Embed <= 2.5.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-2512 affects the Simple Embed Code plugin (up to v2.5.1) with a CVSS score of 6.4. This medium severity cross-site…
CVE-2026-1780: [CR]Paid Link Manager <= 0.5 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1780 affects the Crpaid Link Manager plugin for WordPress, with a medium severity CVSS score of 6.1. Users should upgrade…
CVE-2026-1217: Yoast Duplicate Post <= 4.5 Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1217 affects the Yoast Duplicate Post plugin (up to v4.5) with a medium severity (CVSS 5.4) vulnerability. Users should upgrade…
CVE-2026-4268: WP Go Maps (formerly WP Google Maps) <= 10.0.05 Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-4268 affects WP Google Maps plugin versions up to 10.0.05, with a CVSS score of 6.4. Authenticated users can exploit…
CVE-2026-3512: Writeprint Stylometry <= 0.1 Reflected Cross-Site Scripting via 'p' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-3512 affects the Writeprint Stylometry plugin (v0.1) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Ensure to patch or…
CVE-2026-1926: Subscriptions for WooCommerce <= 1.9.2 Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1926 affects the Subscriptions For WooCommerce plugin (up to v1.9.2) with a CVSS score of 5.3. This medium severity remote…
CVE-2026-1883: Wicked Folders <= 4.1.0 Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Folder Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1883 affects the Wicked Folders plugin (up to version 4.1.0) with a medium severity (CVSS 4.3) vulnerability allowing authenticated users…
CVE-2026-3492: Gravity Forms <= 2.9.28.1 Authenticated (Subscriber+) Stored Cross-Site Scripting via Form Title PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-3492 affects Gravity Forms versions up to 2.9.28.1, with a CVSS score of 6.4. It allows authenticated users to exploit…
CVE-2026-1704: Appointment Booking Calendar <= 1.6.9.29 Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1704 affects the Simply Schedule Appointments plugin (up to 1.6.9.29) with a medium severity (CVSS 4.3). Authenticated users can access…
←
1
…
115
116
117
118
119
120
→