Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-15058: Responsive Pricing Table <= 5.1.12 Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency' PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-15058 affects the Dk Pricr Responsive Pricing Table plugin (up to v5.1.12) with a medium severity CVSS score of 6.4.…
CVE-2025-13418: Responsive Pricing Table <= 5.1.12 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13418 affects the Dk Pricr Responsive Pricing Table plugin (up to 5.1.12) with a medium severity CVSS score of 6.4.…
CVE-2025-14796: My Album Gallery <= 1.0.4 Authenticated (Author+) Stored Cross-Site Scripting via Image Title PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14796 affects the My Album Gallery plugin (up to v1.0.4) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated…
CVE-2025-14131: WP Widget Changer <= 1.2.5 Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14131 affects the WP Widget Changer plugin (up to version 1.2.5) with a medium severity CVSS score of 6.1. Unauthenticated…
CVE-2025-14128: Stumble! for WordPress <= 1.1.1 Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14128 affects the Stumble! for WordPress plugin (up to version 1.1.1) with a medium severity CVSS score of 6.1 due…
CVE-2025-14121: EDD Download Info <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14121 affects the EDD Download Info plugin (up to v1.1) with a CVSS score of 6.4. Authenticated attackers can exploit…
CVE-2025-14130: Post Like Dislike <= 1.0 Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14130 affects the Post Like Dislike plugin for WordPress (version 1.0), exposing it to a medium severity reflected cross-site scripting…
CVE-2025-14147: Easy GitHub Gist Shortcodes <= 1.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14147 affects the Easy Github Gist Shortcodes plugin (v1.0) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users should…
CVE-2025-13419: Guest posting / Frontend Posting / Front Editor – WP Front User Submit <= 5.0.0 Missing Authorization to Unauthenticated Media Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13419 affects the Front Editor plugin for WordPress (up to 5.0.0) with a CVSS score of 5.3. Unauthenticated attackers can…
CVE-2025-14028: Contact Us Simple Form <= 1.0 Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14028 affects the Contact Us Simple Form plugin for WordPress, with a CVSS score of 4.4. Admins should patch to…
CVE-2025-14460: Piraeus Bank WooCommerce Payment Gateway <= 3.1.4 Missing Authorization to Unauthenticated Arbitrary Order Status Change PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14460 affects Woo Payment Gateway For Piraeus Bank (up to version 3.1.4) with a CVSS score of 5.3. It allows…
CVE-2025-13887: AI BotKit <= 1.1.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13887 affects Ai Botkit For Lead Generation plugin versions up to 1.1.7, with a CVSS score of 6.4. Update to…
CVE-2025-13841: Smart App Banners <= 1.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' and 'verticalalign' Shortcode Attributes PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13841 affects the Smart App Banners plugin (v1.2) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users should update…
CVE-2025-13694: AA Block country <= 1.0.1 Unauthenticated IP Address Spoofing via X-Forwarded-For Header PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13694 affects the Aa Block Country plugin for WordPress (up to 1.0.1) with a medium severity (CVSS 5.3) IP address…
CVE-2025-13529: Unify <= 3.4.9 Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13529 affects the Unify WordPress plugin (up to version 3.4.9) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
CVE-2025-12540: ShareThis Dashboard for Google Analytics <= 3.2.4 Unauthenticated Google Analytics Data Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-12540 affects the Googleanalytics plugin (v3.2.4) with a medium severity (CVSS 4.7) vulnerability allowing remote code execution. Patch to secure…
CVE-2025-13531: Stylish Order Form Builder <= 1.0 Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product_name' Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13531 reveals a medium severity XSS vulnerability in the Stylish Order Form Builder plugin for WordPress, affecting version 1.0. Patching…
CVE-2025-14999: Latest Tabs <= 1.5 Cross-Site Request Forgery to Plugin's Settings Update PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14999 affects the Kento Latest Tabs plugin (up to v1.5) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure to…
CVE-2025-13667: WP Recipe Manager <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'Skill Level' Input Field PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13667 affects the WP Recipe Manager plugin (v1.0.0) with a medium severity CVSS score of 6.4. Authenticated users can exploit…
CVE-2025-13847: PhotoFade <= 0.2.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-13847 affects the PhotoFade plugin (up to v0.2.1) with a CVSS score of 6.4, exposing users to stored XSS attacks.…
←
1
…
75
76
77
78
79
…
120
→