March 24, 2026CVE-2026-1575 affects the Schema Shortcode plugin for WordPress (v1.0) with a CVSS score of 6.4. Authenticated users can exploit this…
March 24, 2026CVE-2026-1378 affects the WP Posts Re-order plugin (version 1.0) with a medium severity CVSS score of 4.3. Unauthenticated attackers can…
March 24, 2026CVE-2026-1393 affects the Add Google Social Profiles To Knowledge Graph Box plugin (v1.0) with a CVSS score of 4.3. This…
March 24, 2026CVE-2026-1390 affects the Redirect Countdown plugin for WordPress (version 1.0) with a CVSS score of 4.3. It allows unauthenticated attackers…
March 24, 2026CVE-2026-4066 affects the Smart Custom Fields plugin (up to v5.0.6) with a medium severity (CVSS 4.3) vulnerability. Authenticated users can…
March 24, 2026CVE-2026-2412 affects the Quiz Master Next plugin (up to v10.3.5) with a medium severity (CVSS 6.5) SQL injection vulnerability. Users…
March 24, 2026CVE-2026-3225 affects LearnPress plugin versions up to 4.3.2.8, allowing authenticated users to delete quiz answers due to a missing capability…
March 24, 2026CVE-2026-4056 affects the User Registration plugin (versions 5.0.1 to 5.1.4) with a medium severity (CVSS 5.4). Patch to version 5.1.5…
March 24, 2026CVE-2026-3138 affects the Woo Product Filter plugin (up to v3.1.2) with a medium severity (CVSS 6.5). Unauthenticated attackers can delete…
March 24, 2026The Post Flagger plugin for WordPress (up to version 1.1) has a medium severity XSS vulnerability (CVE-2026-1854). Authenticated attackers can…
March 24, 2026CVE-2026-1647 affects the Comment Genius plugin (up to version 1.2.5) with a medium severity CVSS score of 6.1 due to…
March 23, 2026CVE-2026-2290 affects the Post Affiliate Pro plugin for WordPress (up to 1.28.0) with a CVSS score of 6.5. Authenticated attackers…
March 23, 2026CVE-2025-13910 affects the WP-WebAuthn plugin (up to v1.3.4) with a medium severity CVSS score of 6.1. Unauthenticated XSS can occur…
March 23, 2026CVE-2026-1093 affects the WPFAQBlock plugin (up to v1.1) with a medium severity (CVSS 6.4) XSS vulnerability. Authenticated users can exploit…
March 23, 2026CVE-2026-1278 affects the Mandatory Fields plugin for WordPress (up to v1.6.8) with a CVSS score of 4.4. Authenticated attackers can…
March 23, 2026CVE-2026-1275 affects the Multi Post Carousel plugin for WordPress (up to v1.4) with a CVSS score of 6.4. It allows…
March 23, 2026CVE-2026-1247 affects the Survey plugin for WordPress (up to version 1.1) with a medium severity CVSS score of 4.4. Authenticated…
March 23, 2026CVE-2026-0609 affects the Logo Slider Wp plugin (up to 4.9.0) with a medium severity CVSS score of 6.4. Authenticated attackers…
March 23, 2026CVE-2025-14029 affects the Community Events plugin (up to v1.5.6) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized event approvals.…
March 23, 2026CVE-2025-12168 affects the Memsource Connector plugin (up to v4.7.5) with a CVSS score of 4.3. It allows authenticated users to…
