March 18, 2026CVE-2025-14999 affects the Kento Latest Tabs plugin (up to v1.5) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure to…
March 18, 2026CVE-2025-13667 affects the WP Recipe Manager plugin (v1.0.0) with a medium severity CVSS score of 6.4. Authenticated users can exploit…
March 18, 2026CVE-2025-13847 affects the PhotoFade plugin (up to v0.2.1) with a CVSS score of 6.4, exposing users to stored XSS attacks.…
March 18, 2026CVE-2025-14110 affects the WP Js List Pages Shortcodes plugin (up to v1.21) with a medium severity (CVSS 6.4) XSS vulnerability.…
March 18, 2026CVE-2025-13497 affects the Recras WordPress plugin (up to version 6.4.1) with a medium severity (CVSS 6.4) XSS vulnerability. Update to…
March 18, 2026CVE-2025-13496 affects the Moosend Landing Pages plugin (up to v1.1.6) with a medium severity (CVSS 5.3) vulnerability. Authenticated users can…
March 18, 2026CVE-2025-13520 affects the MTCaptcha WordPress plugin (up to version 2.7.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure to…
March 18, 2026CVE-2025-13519 affects the SVG Map By Saedi plugin for WordPress (up to 1.0.0) with a CVSS score of 6.1. Unauthenticated…
March 18, 2026CVE-2025-13527 affects the xShare plugin for WordPress (up to version 1.0.1) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure…
March 18, 2026CVE-2025-12030 affects the ACF to REST API plugin (up to v3.3.4) with a CVSS score of 4.3. Authenticated users can…
March 18, 2026CVE-2025-13521 affects the WP Change Status Notifier plugin (version 1.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure you…
March 18, 2026CVE-2025-15000 affects the Page Keys plugin (up to v1.3.3) with a medium severity (CVSS 4.4) XSS vulnerability. Patch to v1.3.4…
March 18, 2026CVE-2025-14802 affects LearnPress versions up to 4.3.2.1, allowing authenticated attackers to delete lesson materials due to a parameter mismatch. Upgrade…
March 18, 2026CVE-2025-14888 affects the Simple User Meta Editor plugin (v1.0.0) with a medium severity CVSS score of 4.4. Authenticated admins can…
March 18, 2026CVE-2025-14887 affects the Twinklesmtp plugin (up to version 1.03) with a medium severity CVSS score of 4.4. Authenticated attackers can…
March 18, 2026CVE-2025-13657 affects the Helpdesk Contact Form plugin (up to v1.1.5) with a medium severity (CVSS 4.3) Cross-Site Request Forgery vulnerability.…
March 18, 2026CVE-2025-14875 affects the Hblpay Payment Gateway for WooCommerce plugin (up to version 5.0.0), with a medium severity CVSS score of…
March 18, 2026CVE-2025-14867 affects the Flashcard plugin for WordPress (up to version 0.9) with a medium severity (CVSS 6.5) path traversal vulnerability.…
March 18, 2026CVE-2025-14370 affects the Quote Comments plugin for WordPress (up to version 3.0.0) with a medium severity (CVSS 5.3). Authenticated users…
March 18, 2026CVE-2025-14904 affects the Newsletter Email Subscribe plugin for WordPress (up to v2.4) with a medium severity (CVSS 4.3) CSRF vulnerability.…
