April 6, 2026CVE-2026-25397 affects the File Uploader for WooCommerce plugin (up to v1.0.4) with a medium severity CVSS score of 5.3. Unauthenticated…
April 6, 2026CVE-2026-32545 affects the Taboola Pixel plugin for WordPress (versions 1.1.4 and below) with a medium severity CVSS score of 6.1.…
April 6, 2026CVE-2026-24369 affects The Grid plugin for WordPress (up to version 2.8.0) with a medium severity (CVSS 4.3). Authenticated attackers can…
April 6, 2026CVE-2026-23977 affects the Support Ticket System For WooCommerce plugin (up to v2.1.2), allowing unauthorized actions via its REST API. Update…
April 6, 2026CVE-2026-24376 affects the WPVulnerability plugin (up to 4.2.1) with a medium severity (CVSS 4.3) flaw allowing unauthorized access to sensitive…
April 6, 2026CVE-2026-25438 affects the Unlimited Blocks plugin for WordPress (up to version 1.2.8) with a CVSS score of 6.1. Unauthenticated attackers…
April 6, 2026CVE-2026-25312 affects the Eventprime Event Calendar Management plugin (up to version 4.2.8.3) with a medium severity (CVSS 5.3) vulnerability allowing…
April 6, 2026CVE-2026-25365 affects the Kargo Takip Turkiye plugin (up to version 0.2.4) with a medium severity (CVSS 4.3) vulnerability. Authenticated users…
April 6, 2026CVE-2026-25398 affects the Addons For Elementor Builder plugin (up to v1.6.4) with a medium severity (CVSS 4.3) vulnerability. Update to…
April 6, 2026CVE-2026-24362 affects the Ultimate Post Kit plugin (up to v4.0.21) with a medium severity CVSS score of 4.3. Authenticated attackers…
April 6, 2026CVE-2026-25317 affects the Woocommerce Delivery Notes plugin (up to v5.9.0) with a CVSS score of 5.3. It allows unauthorized access…
April 6, 2026CVE-2026-25013 affects the Phox Hosting plugin (up to v2.0.8) with a medium severity CVSS score of 6.1. Users should patch…
April 6, 2026CVE-2026-25430 affects the Cf7 Mailchimp plugin (v1.2.2) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions by authenticated users.…
April 6, 2026CVE-2026-32565 affects the Contextual Related Posts plugin for WordPress (up to version 4.2.2) with a medium severity (CVSS 5.3). Patch…
April 6, 2026CVE-2026-25437 affects the Gzseo plugin (up to version 2.0.14) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Users…
April 6, 2026CVE-2026-25306 affects the XStore Core Plugin for WordPress (versions
April 6, 2026CVE-2026-25309 affects the PublishPress Authors plugin (up to v4.10.1) with a CVSS score of 5.3. Unauthenticated attackers can modify post…
April 6, 2026CVE-2026-24987 affects the Winterlock plugin (up to v1.2.7) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions by authenticated…
April 6, 2026CVE-2026-25462 affects the Avalex plugin (up to v3.1.3) with a medium severity (CVSS 5.3) vulnerability. Unauthenticated attackers can exploit this…
April 6, 2026CVE-2026-0688 affects the Webmention plugin for WordPress (up to 5.6.2) with a medium severity (CVSS 6.4) SSRF vulnerability. Users should…
