March 18, 2026CVE-2025-69349 affects the RSS Feed Widget plugin for WordPress up to version 3.0.2, allowing unauthorized actions by authenticated users. Upgrade…
March 18, 2026CVE-2025-13722 affects the Fluent Forms plugin (up to v6.1.7) with a medium severity (CVSS 5.3) vulnerability. Authenticated users can exploit…
March 18, 2026CVE-2025-14352 affects the Awesome Hotel Booking plugin (up to v1.0.3) with a medium severity (CVSS 5.3) flaw allowing unauthorized data…
March 18, 2026CVE-2025-14109 affects the AH Shortcodes plugin (up to 1.0.2) with a medium severity (CVSS 6.4) due to stored XSS vulnerabilities.…
March 18, 2026CVE-2026-22489 affects the Image Slider Slideshow plugin (up to version 1.8) with a medium severity CVSS score of 4.3. Authenticated…
March 18, 2026CVE-2025-14053 affects the Wish To Go plugin (up to v0.5.2) with a medium severity (CVSS 6.4) Stored XSS vulnerability. Authenticated…
March 18, 2026CVE-2025-14077 affects the Simcast plugin for WordPress (version 1.0.0) with a medium severity CVSS score of 4.3. Unauthenticated attackers can…
March 18, 2026CVE-2025-13974 affects the Email Customizer for WooCommerce plugin (up to v2.6.7) with a medium severity CVSS score of 4.4. Admins…
March 18, 2026CVE-2025-13849 affects the Cool YT Player plugin (v1.0) with a medium severity (CVSS 6.4) due to stored XSS vulnerabilities. Users…
March 18, 2026CVE-2025-14127 affects the Testimonial Master plugin (up to version 0.2.1) with a medium severity CVSS score of 6.1 due to…
March 18, 2026CVE-2025-14112 affects the Snillrik Restaurant Menu plugin (up to 2.3.0) with a medium severity CVSS of 6.4. Authenticated users can…
March 18, 2026CVE-2025-14118 affects the Starred Review plugin for WordPress (up to version 1.4.2) with a medium severity CVSS score of 6.1.…
March 18, 2026CVE-2025-14465 affects the Sticky Action Buttons plugin for WordPress (up to v1.1) with a medium severity (CVSS 4.3) CSRF vulnerability.…
March 18, 2026CVE-2025-13848 affects the STM Gallery plugin (up to v0.9) with a medium severity (CVSS 6.4) due to stored XSS vulnerabilities.…
March 18, 2026CVE-2025-14626 affects the Qr Code Tag For Wc From Goaskle Com plugin (up to v1.9.42) with a CVSS score of…
March 18, 2026CVE-2025-14057 affects the Multi Column Tag Map plugin (up to 17.0.39) with a medium severity CVSS score of 4.4. Authenticated…
March 18, 2026CVE-2025-14113 affects the Viitor Shortcodes plugin (v3.0.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated attackers can inject…
March 18, 2026CVE-2025-14145 affects the Niche Hero plugin (up to 1.0.5) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated users…
March 18, 2026CVE-2025-14122 affects the Ad Sliding FAQ plugin (up to v2.4) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated…
March 18, 2026CVE-2025-15058 affects the Dk Pricr Responsive Pricing Table plugin (up to v5.1.12) with a medium severity CVSS score of 6.4.…
