March 18, 2026CVE-2025-14984 affects the Gutenverse Form plugin (up to v2.3.2) with a medium severity (CVSS 6.4) XSS vulnerability. Update to v2.4.0…
March 18, 2026CVE-2025-14275 affects the Jeg Elementor Kit plugin (up to v3.0.1) with a medium severity (CVSS 6.4) stored XSS vulnerability. Update…
March 18, 2026CVE-2025-12640 affects the Folders plugin for WordPress (up to version 3.1.5) with a medium severity (CVSS 4.3) vulnerability. Authenticated attackers…
March 18, 2026CVE-2026-27094 affects the Coblocks plugin for WordPress (up to version 3.1.16) with a medium severity CVSS score of 6.4. Update…
March 18, 2026CVE-2025-13679 affects the Tutor LMS plugin (up to v3.9.3) with a CVSS score of 6.5. It allows unauthorized data access…
March 18, 2026CVE-2026-22492 affects the Docket Cache plugin for WordPress (up to 24.07.04) with a medium severity CVSS score of 4.3. Ensure…
March 18, 2026CVE-2026-23805 affects the Media Search Enhanced plugin (up to v0.9.1) with a medium severity SQL injection vulnerability (CVSS 6.5). Update…
March 18, 2026CVE-2026-27092 affects the WPAdverts plugin (up to v2.2.11) with a medium severity (CVSS 4.3) vulnerability. Authenticated attackers can exploit this…
March 18, 2026CVE-2026-22517 affects the GA4WP plugin (up to v2.10.0) with a CVSS score of 4.3. This medium severity vulnerability allows unauthorized…
March 18, 2026CVE-2025-14358 affects the REHub Framework plugin for WordPress (up to version 19.9.5) with a medium severity CVSS score of 5.3.…
March 18, 2026CVE-2025-69350 affects the Accordions Wp plugin (up to version 3.0.3) with a medium severity CVSS score of 4.4. Users should…
March 18, 2026CVE-2026-22518 affects the X Addons Elementor plugin (up to version 1.0.23) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2025-13504 affects the Real Estate Pro plugin for WordPress (up to version 2.1.4) with a medium severity CVSS score of…
March 18, 2026CVE-2026-22490 affects the LPagery plugin for WordPress (up to version 2.4.9) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2026-22487 affects the Baqend plugin for WordPress (up to version 2.0.2) with a medium severity CVSS score of 4.3. Ensure…
March 18, 2026CVE-2026-22488 affects the Dashboard Welcome for Beaver Builder plugin (up to v1.0.8), allowing unauthorized access due to a missing capability…
March 18, 2026CVE-2026-22519 affects the MediaPress plugin (v1.6.2 and below) with a medium severity CVSS of 6.4 due to stored XSS. Update…
March 18, 2026CVE-2026-22522 affects the Block Slider plugin for WordPress (up to version 2.2.3) with a medium severity (CVSS 4.3) vulnerability. Ensure…
March 18, 2026CVE-2025-69093 affects the ShopMagic for WooCommerce plugin (up to version 4.7.2) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2025-69349 affects the RSS Feed Widget plugin for WordPress up to version 3.0.2, allowing unauthorized actions by authenticated users. Upgrade…
