Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-24627: Trusona for WordPress <= 2.0.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24627 affects the Trusona plugin for WordPress (up to version 2.0.0) with a medium severity CVSS score of 4.3. Authenticated…
CVE-2026-24626: Logo Slider <= 4.9.0 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24626 affects the Logo Slider Wp plugin (up to v4.9.0) with a CVSS score of 6.4. Authenticated attackers can exploit…
CVE-2025-14943: Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14943 affects the Blog2Social plugin (up to v8.7.2) with a CVSS score of 4.3. Authenticated users can access sensitive content…
CVE-2026-24630: Stylish Cost Calculator <= 8.1.9 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24630 affects the Stylish Cost Calculator plugin (up to v8.1.9) with a medium severity (CVSS 6.4) stored XSS vulnerability. Update…
CVE-2026-24629: Web Accessibility with Max Access <= 2.1.0 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24629 affects the Accessibility Toolbar plugin for WordPress (up to version 2.1.0) with a medium severity CVSS score of 4.4.…
CVE-2026-24633: Add Expires Headers & Optimized Minify <= 3.1.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24633 affects the Add Expires Headers plugin (up to v3.1.0) with a CVSS score of 5.3. Unauthenticated attackers can exploit…
CVE-2025-14976: User Registration & Membership <= 4.4.8 Cross-Site Request Forgery to Arbitrary Post Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14976 affects the User Registration plugin (up to v4.4.8) with a medium severity CVSS score of 5.4. Ensure you update…
CVE-2026-0831: Templately <= 3.4.8 Unauthenticated Limited Arbitrary JSON File Write PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0831 affects the Templately plugin for WordPress (versions
CVE-2026-24384: Merge + Minify + Refresh <= 2.14 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24384 affects the Merge Minify Refresh plugin for WordPress, with a medium severity CVSS score of 4.3. Users should upgrade…
CVE-2025-69357: TheGem Theme Elements (for Elementor) <= 5.11.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69357 affects TheGem Elements for Elementor plugin (up to v5.11.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Ensure…
CVE-2025-69353: Proxy & VPN Blocker <= 3.5.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69353 affects the Proxy Vpn Blocker plugin (up to 3.5.3) with a medium severity CVSS score of 4.3. Authenticated attackers…
CVE-2026-27074: Shortcoder — Create Shortcodes for Anything <= 6.5.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-27074 affects the Shortcoder plugin (up to version 6.5.1) with a medium severity CVSS of 6.4. Authenticated users can exploit…
CVE-2026-24632: Delay Redirects <= 1.0.0 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24632 affects the Delay Redirects plugin for WordPress (v1.0.0) with a CVSS score of 4.4. Authenticated attackers can exploit this…
CVE-2025-13701: Shabat Keeper <= 0.4.4 Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13701 affects the Shabat Keeper plugin for WordPress (up to version 0.4.4) with a CVSS score of 6.1. This reflected…
CVE-2025-14172: WP Page Permalink Extension <= 1.5.4 Missing Authorization to Authenticated (Subscriber+) Arbitrary Rewrite Rules Flush PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14172 affects the Change WP Page Permalinks plugin (up to v1.5.4) with a medium severity (CVSS 6.5) vulnerability. Authenticated users…
CVE-2026-24366: YITH WooCommerce Request A Quote <= 2.46.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24366 affects the YITH WooCommerce Request A Quote plugin (up to v2.46.0) with a medium severity CVSS score of 5.3.…
CVE-2025-69354: Better Business Reviews <= 0.1.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69354 affects the Better Business Reviews plugin (up to v0.1.1) with a medium severity (CVSS 4.3) vulnerability. Patch to v0.1.2…
CVE-2025-14948: miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 Missing Authorization to Unauthenticated Notification Settings Modification PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14948 affects the miniOrange Sms Order Notification OTP Verification plugin (up to v4.3.8) with a CVSS score of 5.3. Unauthenticated…
CVE-2025-69352: The Events Calendar <= 6.15.12.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69352 affects The Events Calendar plugin (up to version 6.15.12.2) with a medium severity CVSS score of 4.3. Authenticated users…
CVE-2026-24965: Contest Gallery <= 28.1.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24965 affects the Contest Gallery plugin (up to version 28.1.1) with a CVSS score of 4.3. It allows authenticated users…
←
1
…
69
70
71
72
73
…
120
→