March 25, 2026CVE-2026-4766 affects the Easy Image Gallery plugin for WordPress (up to 1.5.3) with a medium severity CVSS score of 6.4.…
March 25, 2026CVE-2026-2121 affects the Weaver Show Posts plugin (up to 1.8.1) with a medium severity CVSS score of 4.4. Administrators can…
March 25, 2026CVE-2026-1253 affects the AtomChat plugin for WordPress (up to version 1.1.7) with a medium severity CVSS score of 5.3. Authenticated…
March 25, 2026CVE-2026-1935 affects the Company Posts for LinkedIn plugin (v1.0.0) with a medium severity (CVSS 4.3) vulnerability. Authenticated users can delete…
March 25, 2026CVE-2026-2720 affects Hr Press Lite plugin (v1.0.2) with a medium severity (CVSS 6.5). It allows authenticated users to access sensitive…
March 25, 2026CVE-2026-2427 affects the Itsukaita plugin for WordPress (up to version 0.1.2) with a medium severity (CVSS 6.1) reflected cross-site scripting…
March 25, 2026CVE-2026-1503 affects the Login Register plugin for WordPress (up to version 1.2.0) with a medium severity (CVSS 4.3) XSS vulnerability.…
March 25, 2026CVE-2026-1822 affects the WP NG Weather plugin (up to v1.0.9) with a medium severity CVSS of 6.4 due to stored…
March 25, 2026CVE-2026-2277 affects the Rexcrawler plugin (v1.0.15) with a CVSS score of 6.1. It allows unauthenticated attackers to exploit reflected XSS…
March 25, 2026CVE-2026-1806 affects the Tour Operator Plugin (up to version 1.7.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
March 25, 2026CVE-2026-2723 affects the Post Snippits plugin for WordPress (version 1.0 and earlier) with a CVSS score of 6.1. Ensure you…
March 25, 2026CVE-2026-1851 affects the iVysilani Shortcode plugin for WordPress (up to version 3.0) with a medium severity (CVSS 6.4) XSS vulnerability.…
March 25, 2026CVE-2026-4161 affects the Review Map By RevuKangaroo plugin (up to v1.7) with a medium severity (CVSS 4.4) cross-site scripting vulnerability.…
March 25, 2026CVE-2026-2501 affects the Eds Social Share plugin (up to v2.0) with a CVSS score of 6.4. This medium-severity XSS vulnerability…
March 25, 2026CVE-2026-2503 affects the Element Camp plugin for WordPress (up to version 2.3.6) with a medium severity SQL injection vulnerability. Authenticated…
March 25, 2026CVE-2026-2424 affects the Applixir plugin (up to version 1.6) with a medium severity (CVSS 4.4) due to stored XSS vulnerabilities.…
March 25, 2026CVE-2026-2496 affects the Ed's Font Awesome plugin for WordPress (up to version 2.0) with a CVSS score of 6.4. Authenticated…
March 24, 2026CVE-2026-3079 affects the LearnDash LMS plugin (up to 5.0.3) with a medium severity SQL injection vulnerability. Authenticated attackers can exploit…
March 24, 2026CVE-2026-1575 affects the Schema Shortcode plugin for WordPress (v1.0) with a CVSS score of 6.4. Authenticated users can exploit this…
March 24, 2026CVE-2026-1378 affects the WP Posts Re-order plugin (version 1.0) with a medium severity CVSS score of 4.3. Unauthenticated attackers can…
