March 23, 2026CVE-2026-27071 affects the WP Cafe plugin, with a medium severity CVSS score of 5.3. Unauthenticated attackers can exploit this vulnerability…
March 23, 2026CVE-2025-15473 affects the Timetics plugin for WordPress, rated medium severity (CVSS 5.3). It allows unauthorized access due to missing capability…
March 23, 2026CVE-2025-69358 affects the Eventprime Event Calendar Management plugin with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Users should…
March 23, 2026CVE-2026-1753 affects the Gutena Forms plugin for WordPress, allowing unauthorized access due to a missing capability check. Users should update…
March 23, 2026CVE-2026-27046 affects the Woocustomizer plugin for WordPress, allowing remote code execution due to a missing capability check. Users should update…
March 23, 2026CVE-2026-24372 affects the Subscriptions for WooCommerce plugin, allowing remote code execution due to a missing capability check. Users should update…
March 23, 2026CVE-2026-24611 affects the Metform Pro plugin for WordPress, allowing unauthorized access due to a missing capability check. Users should patch…
March 23, 2026CVE-2026-32459 affects the Checkout Upsell And Order Bumps plugin with a medium severity (CVSS 4.9) SQL injection vulnerability. Ensure you…
March 23, 2026CVE-2026-32458 affects the Bulk Editor plugin for WordPress, with a medium severity score of 4.9. Authenticated attackers can exploit SQL…
March 23, 2026CVE-2026-32460 affects the Ultimate Addons For Contact Form 7 plugin with a medium severity (CVSS 6.4) due to stored cross-site…
March 23, 2026CVE-2026-24968 affects the Xagio SEO plugin for WordPress, allowing unauthenticated attackers to escalate privileges to admin. Users should patch to…
March 23, 2026CVE-2026-32452 affects the Fusion Builder plugin for WordPress, rated medium severity with a CVSS of 5.3. Unauthenticated attackers can exploit…
March 23, 2026CVE-2026-27068 affects the Website LLMs Txt plugin for WordPress, with a medium severity CVSS of 6.1. Unauthenticated attackers can exploit…
March 23, 2026CVE-2026-32457 affects the Advanced Product Fields for WooCommerce plugin, allowing remote code execution due to a missing capability check. Users…
March 23, 2026CVE-2026-3589 affects WooCommerce versions up to 10.5.3, with a CVSS score of 4.3. This medium severity cross-site request forgery vulnerability…
March 23, 2026CVE-2026-23806 affects the Job Postings plugin for WordPress, with a medium severity score of 5.3. Unauthenticated attackers can exploit this…
March 23, 2026CVE-2026-32451 affects the Fusion Builder plugin for WordPress, allowing unauthorized access for authenticated users. Update to version 3.15.0 or later…
March 23, 2026CVE-2025-49353 affects the Noindex By Path plugin for WordPress (version 1.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure…
March 23, 2026CVE-2025-62154 affects the Ai Content Writing Assistant plugin (versions
March 23, 2026CVE-2025-62990 affects the Addons For Beaver Builder plugin (up to version 3.9.2) with a medium severity CVSS score of 6.4.…
