March 18, 2026CVE-2026-1071 affects the Carta Online plugin for WordPress (up to v2.13.0) with a medium severity (CVSS 4.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-2431 affects the CM Custom Reports plugin (up to v1.2.7) with a medium severity (CVSS 6.1) XSS vulnerability. Users should…
March 18, 2026CVE-2026-2488 affects the ProfileGrid User Profiles plugin (up to version 5.9.8.1) with a CVSS score of 4.3. Authenticated users can…
March 18, 2026CVE-2026-2494 affects the ProfileGrid User Profiles plugin (up to 5.9.8.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Update to…
March 18, 2026CVE-2026-2429 affects the Community Events plugin for WordPress (up to 1.5.8) with a medium severity (CVSS 4.9) SQL injection vulnerability.…
March 18, 2026CVE-2026-2721 affects the Mailarchiver plugin (up to version 4.4.0) with a medium severity (CVSS 4.8) stored XSS vulnerability. Upgrade to…
March 18, 2026CVE-2026-1569 affects the Wueen plugin (up to version 0.2.0) with a medium severity (CVSS 6.4) due to stored XSS vulnerabilities.…
March 18, 2026CVE-2026-1574 affects the Myqtip Easy Qtip2 plugin (up to v2.0.5) with a medium severity (CVSS 6.4) due to stored XSS.…
March 18, 2026CVE-2026-1823 affects the Consensus Embed plugin for WordPress (up to v1.6) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-1650 affects the Mobile Dj Manager plugin (v1.7.8.1) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized data modification. Update…
March 18, 2026CVE-2026-1820 affects the Media Library Alt Text Editor plugin (v1.0.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Patching…
March 18, 2026CVE-2026-1805 affects the Damedia Giglist plugin (up to v1.9.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users should…
March 18, 2026CVE-2026-1825 affects the Show YouTube Video plugin for WordPress, with a medium severity CVSS score of 6.4. Authenticated attackers can…
March 18, 2026CVE-2026-2371 affects the Greenshift Animation And Page Builder Blocks plugin (up to v12.8.3) with a medium severity (CVSS 5.3) IDOR…
March 18, 2026CVE-2026-1824 affects the Infomaniak Connect OpenID plugin (v1.0.2) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated attackers can…
March 18, 2026CVE-2026-1902 affects the Hammas Calendar plugin (up to v1.5.11) with a medium severity (CVSS 6.4) cross-site scripting vulnerability. Update to…
March 18, 2026CVE-2026-1073 affects the Purchase Button plugin for WordPress (v1.0.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure to patch…
March 18, 2026CVE-2026-2722 affects the Stock Ticker plugin (up to version 3.26.1) with a CVSS score of 4.8. Authenticated attackers can exploit…
March 18, 2026CVE-2026-1644 affects the WP Front End Profile plugin (up to v1.3.8) with a CVSS score of 4.3. This medium-severity CSRF…
March 18, 2026CVE-2025-68515 affects the WP Booking System plugin (up to version 2.0.19.12) with a CVSS score of 5.3, exposing sensitive data…
