April 6, 2026CVE-2025-14938 affects the Listeo Core plugin (versions
April 6, 2026CVE-2026-0626 affects the WPFunnels plugin (up to version 3.7.9) with a CVSS score of 6.4. This medium-severity XSS vulnerability allows…
April 6, 2026CVE-2026-2600 affects the ElementsKit Lite plugin (up to version 3.7.9) with a medium severity CVSS score of 6.4. Authenticated attackers…
April 6, 2026CVE-2026-0552 affects the WordPress Simple Paypal Shopping Cart plugin (up to version 5.2.4) with a medium severity score of 6.4.…
April 6, 2026CVE-2026-2437 affects WP Travel Engine plugin versions up to 6.7.5, allowing authenticated users to exploit stored XSS due to insufficient…
April 6, 2026CVE-2026-0738 affects the Shortcodes Ultimate plugin (up to 7.4.8) with a CVSS score of 6.4. Authenticated users can exploit a…
April 6, 2026CVE-2026-2826 affects the Kadence Blocks plugin (up to v3.6.3) with a medium severity CVSS score of 4.3. An authorization bypass…
April 6, 2026CVE-2026-3309 affects the Wp User Avatar plugin (versions
April 6, 2026CVE-2025-15064 affects the Ultimate Member plugin (up to v2.11.1) with a CVSS score of 6.4. It allows authenticated users to…
April 6, 2026CVE-2026-3571 affects the Pie Register plugin (up to v3.8.4.8) with a medium severity (CVSS 6.5) vulnerability allowing unauthorized data modification.…
April 6, 2026CVE-2026-2949 affects the Xpro Elementor Addons plugin (v1.4.24) with a medium severity CVSS score of 6.4. Authenticated attackers can exploit…
April 6, 2026CVE-2026-2924 affects the Gutenverse plugin (up to 3.4.6) with a CVSS score of 6.4. This medium severity XSS vulnerability allows…
April 6, 2026CVE-2025-13368 affects the Xpro Elementor Addons plugin (up to v1.4.20) with a medium severity CVSS score of 6.4, allowing authenticated…
April 6, 2026CVE-2026-0737 affects the Shortcodes Ultimate plugin (up to v7.4.7) with a CVSS score of 6.4. This stored XSS vulnerability allows…
April 6, 2026CVE-2026-0664 affects the Royal Elementor Addons plugin for WordPress (up to version 1.7.1049) with a medium severity CVSS score of…
April 6, 2026CVE-2026-25406 affects Tutor Pro plugin versions up to 3.9.4, allowing unauthorized access due to a missing capability check. Users should…
April 6, 2026CVE-2026-25034 affects the Kivicare Clinic Management System plugin (up to version 3.6.16) with a medium severity CVSS score of 5.3.…
April 6, 2026CVE-2026-25018 affects the NaturaLife Extensions plugin (up to version 2.1) with a medium severity CVSS score of 6.1. Users should…
April 6, 2026CVE-2026-25397 affects the File Uploader for WooCommerce plugin (up to v1.0.4) with a medium severity CVSS score of 5.3. Unauthenticated…
April 6, 2026CVE-2026-32545 affects the Taboola Pixel plugin for WordPress (versions 1.1.4 and below) with a medium severity CVSS score of 6.1.…
