March 18, 2026CVE-2025-15020 affects the Gotham Block Extra Light plugin (v1.5.0) with a medium severity CVSS score of 6.5. Authenticated attackers can…
March 18, 2026CVE-2025-15377 affects the Sosh Share Buttons plugin for WordPress (up to v1.1.0) with a medium severity CVSS of 4.3. Unauthenticated…
March 18, 2026CVE-2026-0741 affects the Electric Studio Download Counter plugin (up to v2.4) with a medium severity (CVSS 4.4) Stored XSS vulnerability.…
March 18, 2026CVE-2025-12178 affects the Spiceforms Form Builder plugin (v1.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated users can…
March 18, 2026CVE-2025-14482 affects the Crush Pics plugin (up to v1.8.7) with a medium severity (CVSS 4.3) vulnerability. Authenticated users can modify…
March 18, 2026CVE-2025-15021 affects the Gotham Block Extra Light plugin (up to version 1.5.0) with a medium severity CVSS score of 4.4.…
March 18, 2026CVE-2026-0678 affects the Flat Shipping Rate By City for WooCommerce plugin (up to 1.0.3) with a CVSS score of 4.9.…
March 18, 2026CVE-2025-14389 affects the WPBlogSyn plugin (v1.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Unauthenticated attackers can alter sync settings…
March 18, 2026CVE-2026-0635 affects the Responsive Accordion Slider plugin (up to v1.2.2) with a medium severity (CVSS 4.3). Authenticated users can modify…
March 18, 2026CVE-2025-14725 affects the Internal Link Builder plugin for WordPress (v1.0) with a CVSS score of 4.4. It allows authenticated admins…
March 18, 2026CVE-2026-0717 affects the Lottiefiles plugin (up to v3.0.0) with a CVSS score of 5.3, exposing sensitive information via the REST…
March 18, 2026CVE-2025-14464 affects the PDF Resume Parser plugin (v1.0) with a CVSS score of 5.3. Unauthenticated users can access sensitive SMTP…
March 18, 2026CVE-2025-13627 affects the Makesweat plugin for WordPress (version 0.1) with a medium severity (CVSS 4.4). Authenticated attackers can exploit stored…
March 18, 2026CVE-2026-0680 affects the Real Post Slider Lite plugin (up to version 2.4) with a medium severity CVSS score of 4.4.…
March 18, 2026CVE-2026-24360 affects the Seriously Simple Podcasting plugin for WordPress (up to version 3.14.1) with a medium severity CVSS score of…
March 18, 2026CVE-2025-69095 affects the Dt Reservation Plugin for WordPress (up to version 1.7) with a medium severity score of 5.3. Unauthenticated…
March 18, 2026CVE-2025-69364 affects the Breeze plugin for WordPress (up to v2.2.21) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized cache…
March 18, 2026CVE-2025-14854 affects WP-CRM System plugin versions up to 3.4.5, with a CVSS score of 5.4. Authenticated attackers can access PII…
March 18, 2026CVE-2025-15486 affects the Kunze Law WordPress plugin (up to v2.1) with a CVSS score of 4.4. Authenticated attackers can exploit…
March 18, 2026CVE-2025-69001 affects the Fluent Forms plugin (up to version 6.1.11) with a medium severity CVSS score of 6.5. Unauthenticated attackers…
