March 23, 2026CVE-2025-12002 affects the YouTube Feed Pro plugin (up to v2.6.0) with a medium severity (CVSS 5.9) file upload vulnerability. Ensure…
March 23, 2026CVE-2026-0820 affects the Computer Repair Shop plugin (up to v4.1116) with a medium severity (CVSS 5.3) vulnerability. Patch to v4.1125…
March 23, 2026CVE-2026-25004 affects the CM Business Directory plugin for WordPress (up to version 1.5.3) with a medium severity (CVSS 6.4) stored…
March 23, 2026CVE-2025-68883 affects the Bidorbuystoreintegrator plugin (up to 2.12.0) with a medium severity (CVSS 6.1) reflected XSS vulnerability. Users should update…
March 23, 2026CVE-2025-68859 affects the Syntax Highlighter Compress plugin (up to v3.0.83.3) with a medium severity CVSS score of 6.1. Unauthenticated attackers…
March 23, 2026CVE-2026-1087 affects The Guardian News Feed plugin (up to v1.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Unauthenticated attackers…
March 23, 2026CVE-2025-68016 affects the Onepay Payment Gateway for WooCommerce plugin (up to v1.1.2) with a medium severity CVSS score of 5.3.…
March 23, 2026CVE-2025-68872 affects the Wordcents plugin (up to 1.3.03.27) with a medium severity CVSS score of 6.1 due to reflected XSS.…
March 23, 2026CVE-2026-0691 affects the CM Email Blacklist plugin (up to version 1.6.2) with a medium severity CVSS score of 4.4. Authenticated…
March 23, 2026CVE-2025-68871 affects the Dooodl WordPress plugin (up to version 2.3.0) with a CVSS score of 6.1. This medium severity XSS…
March 23, 2026CVE-2026-24386 affects the Element Invader plugin for WordPress (up to version 1.2.4) with a medium severity (CVSS 4.3). Ensure you…
March 23, 2026CVE-2025-68849 affects the Quote Master plugin for WordPress (up to version 7.1.1) with a medium severity CVSS score of 6.1.…
March 23, 2026CVE-2025-14793 affects the Dk Pdf plugin (up to v2.3.0) with a medium severity (CVSS 5.0) SSRF vulnerability. Authenticated users can…
March 23, 2026CVE-2026-0939 affects the Woo Rede plugin for WordPress (up to 5.1.2) with a CVSS score of 5.3. Unauthenticated attackers can…
March 23, 2026CVE-2025-14375 affects the Wp Rss Aggregator plugin (up to 5.0.10) with a medium severity (CVSS 6.1) cross-site scripting vulnerability. Update…
March 23, 2026CVE-2025-14853 affects the Last Email Address Validator plugin for WordPress (versions
March 23, 2026CVE-2026-1004 affects the Essential Addons for Elementor Lite plugin (up to v6.5.5), allowing unauthenticated access to sensitive WooCommerce product info.…
March 23, 2026CVE-2025-14757 affects the Cost Calculator Builder plugin for WordPress (up to version 3.6.9) with a CVSS score of 5.3. It…
March 23, 2026CVE-2026-24591 affects the Turn Yoast SEO FAQ Block to Accordion plugin (up to v1.0.6) with a medium severity CVSS score…
March 23, 2026CVE-2025-15370 affects Wp Simple Firewall plugin versions up to 21.0.9 with a medium severity (CVSS 4.3). Authenticated attackers can disable…
