March 18, 2026CVE-2025-13729 affects the Entry Views plugin for WordPress (v1.0.0) with a medium severity CVSS score of 6.4. Authenticated attackers can…
March 18, 2026CVE-2025-14146 affects the Booking Calendar plugin (up to v10.14.10) with a CVSS score of 5.3. Unauthenticated attackers can access sensitive…
March 18, 2026CVE-2025-13853 affects the Nearby Now Reviews plugin (up to v5.2) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
March 18, 2026CVE-2025-13862 affects the Menu Card plugin for WordPress (up to version 0.8.0) with a CVSS score of 6.4. Authenticated attackers…
March 18, 2026CVE-2025-14893 affects the IndieWeb plugin (up to 4.0.5) with a medium severity CVSS score of 6.4 due to stored XSS.…
March 18, 2026CVE-2025-14782 affects the Forminator plugin for WordPress (up to v1.49.1) with a medium severity (CVSS 5.3) authentication bypass. Update to…
March 18, 2026CVE-2025-15019 affects the Bulk Image Alt Text With Yoast plugin (up to 2.2.1) with a CVSS score of 6.4. Authenticated…
March 18, 2026CVE-2025-13934 affects the Tutor LMS plugin (up to version 3.9.3) allowing unauthorized course enrollment. Patch to version 3.9.4 to mitigate…
March 18, 2026CVE-2026-0563 affects the WP Google Street View plugin (up to v1.1.8) with a medium severity CVSS score of 6.4. Authenticated…
March 18, 2026CVE-2025-14980 affects the BetterDocs plugin for WordPress (up to version 4.3.3) with a CVSS score of 6.5. Authenticated users can…
March 18, 2026CVE-2025-13628 affects Tutor plugin version 3.9.3, allowing authenticated users to delete coupons due to a missing capability check. Upgrade to…
March 18, 2026CVE-2025-13749 affects the Clearfy plugin (up to v2.4.0) with a medium severity CVSS score of 4.3. Unauthenticated attackers can disable…
March 18, 2026CVE-2025-14886 affects the Woocommerce For Japan plugin (up to version 2.7.17) with a medium severity CVSS score of 5.3. Patch…
March 18, 2026CVE-2026-24353 affects the User Registration plugin (up to v4.4.9) with a medium severity (CVSS 5.4) vulnerability allowing authenticated users to…
March 18, 2026CVE-2026-24358 affects Quiz Master Next plugin versions up to 10.3.3, allowing unauthorized access for authenticated users. Update to version 10.3.4…
March 18, 2026CVE-2025-14574 affects the weDocs plugin for WordPress (up to version 2.1.15) with a CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2025-14720 affects the Amelia booking plugin (up to v1.2.38) with a CVSS score of 5.3. Unauthenticated attackers can exploit this…
March 18, 2026CVE-2025-14718 affects the Post Expirator plugin (up to v4.9.3) with a medium severity (CVSS 5.4) authentication bypass. Update to v4.9.4…
March 18, 2026CVE-2025-22713 affects the WooCommerce Orders & Customers Exporter plugin (up to v5.4) with a medium severity (CVSS 6.5) SQL injection…
March 18, 2026CVE-2025-27004 affects the Famous Grid Image and Video Gallery plugin (up to version 1.4) with a medium severity CVSS score…
