March 18, 2026CVE-2026-1883 affects the Wicked Folders plugin (up to version 4.1.0) with a medium severity (CVSS 4.3) vulnerability allowing authenticated users…
March 18, 2026CVE-2026-2358 affects WP ULike plugin versions up to 5.0.1, with a medium severity (CVSS 6.4) due to stored XSS. Update…
March 18, 2026CVE-2026-2918 affects Happy Elementor Addons plugin versions up to 3.21.0, with a CVSS score of 6.4. Authenticated attackers can exploit…
March 18, 2026CVE-2026-2917 affects the Happy Elementor Addons plugin (up to v3.21.0) with a medium severity (CVSS 5.4) vulnerability. Update to v3.21.1…
March 18, 2026CVE-2026-3226 affects the LearnPress plugin (up to v4.3.2.8) with a medium severity (CVSS 4.3). It allows authenticated users to trigger…
March 18, 2026CVE-2026-2324 affects the LatePoint plugin (v5.2.7) with a medium severity (CVSS 6.1) cross-site scripting vulnerability. Upgrade to v5.2.8 to mitigate…
March 18, 2026CVE-2026-2707 affects the Weforms plugin for WordPress (up to version 1.6.27) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-1781 affects the Mailchimp For WP plugin (up to v4.11.1) with a CVSS score of 6.5, allowing remote code execution.…
March 18, 2026CVE-2025-12473 affects Rometheme For Elementor plugin versions up to 1.6.8, with a CVSS score of 6.1. Ensure you upgrade to…
March 18, 2026CVE-2026-1086 affects the Wp Font Pairing Preview plugin (v1.3) with a medium severity (CVSS 4.3) due to cross-site request forgery.…
March 18, 2026CVE-2026-1071 affects the Carta Online plugin for WordPress (up to v2.13.0) with a medium severity (CVSS 4.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-2420 affects the LotekMedia Popup Form plugin (v1.0.6) with a medium severity CVSS score of 4.4. Ensure to patch to…
March 18, 2026CVE-2026-1085 affects the Seo Local Rank plugin (v2.2.9) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure you update to…
March 18, 2026CVE-2026-2433 affects the Wp Rss Aggregator plugin (up to 5.0.11) with a medium severity (CVSS 6.1) cross-site scripting vulnerability. Update…
March 18, 2026CVE-2026-22520 affects the Handmade Framework plugin for WordPress (up to version 3.9) with a medium severity (CVSS 6.1) cross-site scripting…
March 18, 2026CVE-2026-1920 affects the Booktics plugin (up to v1.0.16) with a CVSS score of 5.3. Unauthenticated attackers can exploit this vulnerability…
March 18, 2026CVE-2026-1919 affects the Booktics plugin (up to version 1.0.16) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized data access.…
March 18, 2026CVE-2026-3228 affects the NextScripts Social Networks Auto-Poster plugin (up to 4.4.6) with a medium severity CVSS of 6.4. Ensure proper…
March 18, 2026CVE-2026-2569 affects the 3d Flipbook Dflip Lite plugin (up to v2.4.20) with a CVSS score of 6.4. Authenticated attackers can…
March 18, 2026CVE-2026-27091 affects the Uipress Lite plugin (v3.5.09) with a medium severity (CVSS 4.3) vulnerability. Authenticated users can exploit this flaw…
