Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-14379: Testimonials Creator 1.6 Authenticated (Admin+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14379 affects the Testimonials Creator plugin for WordPress (v1.6) with a CVSS score of 4.4. This medium severity XSS vulnerability…
CVE-2025-69098: Hide My WP <= 6.2.12 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69098 affects the Hide My WP plugin (up to version 6.2.12) with a medium severity CVSS score of 6.1. Users…
CVE-2026-0694: SearchWiz <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0694 affects the SearchWiz plugin for WordPress (up to v1.0.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
CVE-2025-49049: DZS Video Gallery <= 12.39 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49049 affects the Dzs Videogallery plugin (up to version 12.39) with a medium severity (CVSS 6.5) SQL injection vulnerability. Authenticated…
CVE-2025-14507: EventPrime Events Calendar, Bookings and Tickets <= 4.2.7.0 Unauthenticated Sensitive Information Exposure via REST API PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14507 affects the Eventprime Event Calendar Management plugin (versions up to 4.2.7.0) with a CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-24613: Ecwid Shopping Cart <= 7.0.6 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24613 affects the Ecwid Shopping Cart plugin for WordPress (up to 7.0.6) with a CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-24614: Flex QR Code Generator <= 1.2.10 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24614 affects the Flex QR Code Generator plugin (up to 1.2.10) with a medium severity CVSS score of 6.4. Patching…
CVE-2025-68906: JNews Video <= 11.0.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68906 affects the JNews Video plugin (up to version 11.0.2) with a medium severity CVSS score of 6.1 due to…
CVE-2026-27050: RealPress – Real Estate Plugin <= 1.1.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27050 affects the RealPress plugin for WordPress (up to v1.1.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Update to…
CVE-2026-24619: PopCash.Net Code Integration Tool <= 1.8 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24619 affects the Popcash.Net Code Integration Tool plugin (up to v1.8) with a CVSS score of 5.3. Unauthenticated attackers can…
CVE-2026-24616: WP Popups <= 2.2.0.5 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24616 affects WP Popups Lite versions up to 2.2.0.5, allowing unauthorized actions for authenticated users. Update to version 2.2.0.6 to…
CVE-2025-68904: JNews Frontend Submit <= 11.0.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68904 affects the JNews Frontend Submit plugin (up to version 11.0.0) with a medium severity CVSS score of 6.1 due…
CVE-2025-49046: xPromoter <= 1.3.4 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49046 affects the Top_bar_promoter plugin for WordPress (up to version 1.3.4) with a medium severity CVSS score of 6.1. Users…
CVE-2025-49066: Accordion Slider PRO <= 1.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49066 affects the Accordion Slider PRO plugin for WordPress, with a medium severity CVSS score of 6.1. Users should update…
CVE-2025-69363: Responsive Addons for Elementor <= 2.0.8 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69363 affects the Responsive Addons for Elementor plugin (up to v2.0.8) with a medium severity (CVSS 4.3). Authenticated users can…
CVE-2025-69362: UiChemy <= 4.4.2 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69362 affects the UiChemy plugin (up to v4.4.2) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users should upgrade…
CVE-2025-49050: Lead Capturing Pages <= 2.5 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49050 affects the Wp Lead Capture plugin (version 2.5) with a medium severity (CVSS 6.5) SQL injection vulnerability. Authenticated attackers…
CVE-2025-14001: WP Duplicate Page <= 1.8 Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14001 affects the WP Duplicate Page plugin (up to version 1.8) with a CVSS score of 5.4. Authenticated users can…
CVE-2026-0684: CP Image Store with Slideshow <= 1.1.9 Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0684 affects the CP Image Store plugin (up to v1.1.9) with a medium severity (CVSS 4.3) vulnerability allowing authenticated users…
CVE-2026-24617: Easy Modal <= 2.1.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24617 affects the Easy Modal plugin for WordPress (up to version 2.1.0) with a medium severity CVSS score of 6.4.…
←
1
…
67
68
69
70
71
…
120
→