April 6, 2026CVE-2026-32586 affects the WooCommerce Jetpack plugin (up to version 7.11.3) with a medium severity CVSS score of 5.3. It allows…
April 6, 2026CVE-2026-25460 affects the Ave Core plugin (up to v2.9.1) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions by…
April 6, 2026CVE-2026-0688 affects the Webmention plugin for WordPress (up to 5.6.2) with a medium severity (CVSS 6.4) SSRF vulnerability. Users should…
April 6, 2026CVE-2026-32496 affects the Wp Contact Form 7 Spam Blocker plugin (up to v1.2.9) with a CVSS score of 6.5. Authenticated…
April 6, 2026CVE-2026-32516 affects the Miraculouscore plugin for WordPress (up to version 2.1.2) with a medium severity (CVSS 6.5) SQL injection vulnerability.…
April 6, 2026CVE-2026-3572 affects the iTracker360 plugin (up to version 2.2.0) with a CVSS score of 6.1. It allows unauthenticated attackers to…
April 6, 2026CVE-2026-32495 affects the WP Terms Popup plugin (up to v2.10.0) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized actions.…
April 6, 2026CVE-2026-32540 affects the Bookly Responsive Appointment Booking Tool (up to version 26.7) with a medium severity CVSS of 6.1. Users…
April 6, 2026CVE-2026-32527 affects the Cf7 Insightly plugin for WordPress (up to version 1.1.5) with a CVSS score of 4.3. Authenticated users…
April 6, 2026CVE-2026-25033 affects the Motta Addons plugin for WordPress (up to version 1.6.1) with a medium severity (CVSS 6.1) reflected XSS…
April 6, 2026CVE-2026-34890 affects the MSTW League Manager plugin for WordPress (up to version 2.10) with a medium severity CVSS score of…
April 6, 2026CVE-2026-31921 affects the Products Rearrange for WooCommerce plugin (version 1.2.2 and earlier) with a CVSS score of 5.3. Unauthenticated attackers…
April 6, 2026CVE-2026-32519 affects the Bit SMTP plugin for WordPress (up to 1.2.2) with a medium severity (CVSS 5.3) vulnerability. Update to…
April 6, 2026CVE-2026-23972 affects the Booking And Rental Manager For WooCommerce plugin (up to v2.6.0) with a medium severity (CVSS 4.3). Patching…
April 6, 2026CVE-2026-1430 affects the WP Lightbox 2 plugin (up to version 3.0.7) with a medium severity CVSS score of 4.4. Administrators…
April 6, 2026CVE-2026-34887 affects the Kubio AI Page Builder plugin (up to v2.7.0) with a medium severity CVSS score of 6.4 due…
April 6, 2026CVE-2026-25357 affects the Indeed Membership Pro plugin (up to version 13.7) with a CVSS score of 5.3, allowing unauthorized access.…
April 6, 2026CVE-2026-32497 affects the User Verification plugin for WordPress (up to v2.0.45) with a medium severity CVSS score of 5.3. Unauthenticated…
April 6, 2026CVE-2026-25339 affects WPForms Lite versions up to 1.9.8.7, allowing unauthenticated attackers to expose sensitive data. Upgrade to version 1.9.9.2 to…
April 6, 2026CVE-2026-32501 affects WP Configurator Pro versions up to 3.7.9, allowing authenticated users to perform unauthorized actions due to a missing…
