April 1, 2026CVE-2026-32541 affects the Premmerce Redirect Manager plugin for WordPress (up to 1.0.12) with a CVSS score of 4.3. Patch to…
March 30, 2026CVE-2026-25361 affects the Mage Eventpress plugin (up to v5.1.4) with a medium severity CVSS score of 6.1. Unauthenticated attackers can…
March 30, 2026CVE-2026-32498 affects the Custom Registration Form Builder With Submission Manager plugin (up to version 6.0.7.6), allowing unauthorized access. Update to…
March 30, 2026CVE-2026-3577 affects the Keep Backup Daily plugin (up to v2.1.2) with a medium severity CVSS score of 4.4. Admins should…
March 30, 2026CVE-2026-32542 affects the Fusion Builder plugin for WordPress (up to version 3.15.0) with a medium severity CVSS score of 6.1.…
March 30, 2026CVE-2026-2352 affects the Autoptimize plugin (up to v3.1.14) with a medium severity (CVSS 6.4) stored XSS vulnerability. Update to v3.1.15…
March 30, 2026CVE-2026-2430 affects the Autoptimize plugin (up to v3.1.14) with a medium severity (CVSS 6.4) XSS vulnerability. Patch to v3.1.15 to…
March 30, 2026CVE-2026-3567 affects the Computer Repair Shop plugin (versions ≤4.1132) with a medium severity (CVSS 5.3). Authenticated users can modify admin…
March 30, 2026CVE-2026-32546 affects the Restrict Content plugin for WordPress (up to 3.2.22) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
March 30, 2026CVE-2026-32534 affects the Js Support Ticket plugin (up to 3.0.3) with a medium severity (CVSS 6.5) SQL injection vulnerability. Patch…
March 30, 2026CVE-2026-32441 affects the Comments Import Export Woocommerce plugin (up to v2.4.9) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
March 30, 2026CVE-2026-32492 affects the My Tickets plugin (up to v2.1.1) with a medium severity CVSS score of 5.3. It allows unauthorized…
March 30, 2026CVE-2026-25390 affects the New User Approve plugin (up to version 3.2.3) with a CVSS score of 4.3. Authenticated attackers can…
March 30, 2026CVE-2026-32521 affects the WP Custom Admin Interface plugin (up to version 7.42) with a medium severity CVSS score of 6.4.…
March 29, 2026CVE-2026-4077 affects the Ecover Builder For Dummies plugin (v1.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Ensure to…
March 29, 2026CVE-2026-2375 affects the App Builder plugin for WordPress, allowing unauthenticated privilege escalation due to improper role management. Users should update…
March 29, 2026CVE-2026-4022 affects the Show Posts Shortcodes plugin for WordPress, with a medium severity CVSS score of 6.4. Users should update…
March 29, 2026CVE-2026-4086 affects the WP Random Button plugin (v1.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated attackers can…
March 29, 2026CVE-2026-4084 affects the Fyyd Podcast Shortcodes plugin (up to v0.3.1) with a medium severity CVSS score of 6.4. Authenticated attackers…
March 29, 2026CVE-2026-4067 affects the Ad Short plugin for WordPress (up to 2.0.1) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
