March 23, 2026CVE-2025-12168 affects the Memsource Connector plugin (up to v4.7.5) with a CVSS score of 4.3. It allows authenticated users to…
March 23, 2026CVE-2025-12129 affects the CubeWP Framework plugin (up to 1.1.27) with a medium severity (CVSS 5.3) vulnerability that exposes sensitive post…
March 23, 2026CVE-2026-0808 affects the Spin Wheel plugin for WordPress (up to v2.1.0) with a medium severity (CVSS 5.3) vulnerability. Upgrade to…
March 23, 2026CVE-2026-24589 affects the Cargus plugin for WordPress (up to version 1.5.8) with a CVSS score of 5.3. Unauthenticated attackers can…
March 23, 2026CVE-2026-0725 affects the Integrate Dynamics 365 CRM plugin (v1.1.1) with a medium severity CVSS score of 4.4 due to stored…
March 23, 2026CVE-2025-14078 affects the WooCommerce For Paygent Payment Main plugin (up to v2.4.6) with a CVSS score of 5.3. Unauthenticated attackers…
March 23, 2026CVE-2025-14463 affects the Wp Paypal plugin (up to v1.2.3.41) with a CVSS score of 5.3. Unauthenticated attackers can create arbitrary…
March 23, 2026CVE-2025-13725 affects the Thim Blocks plugin for WordPress (up to 1.0.1) with a medium severity (CVSS 6.5) file upload vulnerability.…
March 23, 2026CVE-2025-8615 affects the CubeWP Framework plugin (up to v1.1.26) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users should…
March 23, 2026CVE-2025-12984 affects the Advanced Ads plugin (up to v2.0.15) with a medium severity SQL injection vulnerability. Administrators should update to…
March 23, 2026CVE-2025-67942 affects the Wc Peach Payments Gateway plugin (up to version 3.3.6) with a medium severity CVSS score of 5.3.…
March 23, 2026CVE-2025-12825 affects the User Registration Using Contact Form 7 plugin (up to v2.5) with a CVSS score of 5.3. Unauthenticated…
March 23, 2026CVE-2026-24593 affects the Another Wordpress Classifieds Plugin versions up to 4.4.3, exposing sensitive data to unauthenticated attackers. Upgrade to version…
March 23, 2026CVE-2025-31413 affects Bdthemes Element Pack Lite plugin versions up to 8.3.13, with a medium severity (CVSS 4.3) CSRF vulnerability. Update…
March 23, 2026CVE-2025-14450 affects the Wallet System for WooCommerce plugin (up to 2.7.2) with a CVSS score of 6.5. Authenticated users can…
March 23, 2026CVE-2025-68008 affects the Wp Mail plugin (up to v1.3) with a medium severity CVSS score of 6.1. Unauthenticated attackers can…
March 23, 2026CVE-2025-67939 affects the Tickera Event Ticketing System plugin (up to version 3.5.6.2) with a medium severity CVSS score of 4.3.…
March 23, 2026CVE-2025-14632 affects the Filr Protection plugin (up to v1.2.11) with a medium severity (CVSS 4.4) stored XSS vulnerability. Administrators should…
March 23, 2026CVE-2025-14075 affects the WP Hotel Booking plugin (up to v2.2.7) with a medium severity (CVSS 5.3) vulnerability allowing unauthenticated access…
March 23, 2026CVE-2025-12718 affects the Quick Contact Form plugin (up to version 8.2.6) with a medium severity CVSS of 5.8. Unauthenticated attackers…
