March 18, 2026CVE-2026-1644 affects the WP Front End Profile plugin (up to v1.3.8) with a CVSS score of 4.3. This medium-severity CSRF…
March 18, 2026CVE-2026-2431 affects the CM Custom Reports plugin (up to v1.2.7) with a medium severity (CVSS 6.1) XSS vulnerability. Users should…
March 18, 2026CVE-2026-2488 affects the ProfileGrid User Profiles plugin (up to version 5.9.8.1) with a CVSS score of 4.3. Authenticated users can…
March 18, 2026CVE-2026-2494 affects the ProfileGrid User Profiles plugin (up to 5.9.8.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Update to…
March 18, 2026CVE-2026-2429 affects the Community Events plugin for WordPress (up to 1.5.8) with a medium severity (CVSS 4.9) SQL injection vulnerability.…
March 18, 2026CVE-2026-2721 affects the Mailarchiver plugin (up to version 4.4.0) with a medium severity (CVSS 4.8) stored XSS vulnerability. Upgrade to…
March 18, 2026CVE-2026-3072 affects the Media Library Assistant plugin (up to v3.33) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized data…
March 18, 2026CVE-2026-22491 affects the My Auctions Allegro Free Edition plugin (up to version 3.6.34) with a medium severity CVSS score of…
March 18, 2026CVE-2026-22480 affects the Webtoffee Product Feed plugin for WordPress (versions up to 2.3.3) with a medium severity CVSS of 6.6.…
March 18, 2026CVE-2026-2830 affects WP All Import plugin versions up to 4.0.0, with a CVSS score of 6.1. It allows reflected XSS…
March 18, 2026CVE-2026-2593 affects the Greenshift Animation And Page Builder Blocks plugin (up to 12.8.5) with a medium severity (CVSS 6.4) XSS…
March 18, 2026CVE-2026-1981 affects the Winston Ai Wp plugin up to version 0.0.3, allowing unauthorized data modification by authenticated users. Upgrade to…
March 18, 2026CVE-2026-2589 affects the Greenshift Animation And Page Builder Blocks plugin (up to version 12.8.3) with a CVSS score of 5.3.…
March 18, 2026CVE-2025-68515 affects the WP Booking System plugin (up to version 2.0.19.12) with a CVSS score of 5.3, exposing sensitive data…
March 18, 2026CVE-2026-3034 affects the Ooohboi Steroids for Elementor plugin (up to v2.1.24) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2026-2899 affects the Fluent Forms Pro Add On Pack plugin (up to version 6.1.17) with a medium severity (CVSS 6.5)…
March 18, 2026CVE-2026-2893 affects the Page Or Post Clone plugin for WordPress, with a medium severity CVSS score of 6.5. Users should…
March 18, 2026CVE-2025-69347 affects the Subscription for WooCommerce plugin (up to v1.8.10) with a medium severity (CVSS 4.3) remote code execution vulnerability.…
