March 18, 2026CVE-2025-14904 affects the Newsletter Email Subscribe plugin for WordPress (up to v2.4) with a medium severity (CVSS 4.3) CSRF vulnerability.…
March 18, 2026CVE-2025-13369 affects the Woo Customers Manager plugin (up to v1.1.14) with a CVSS score of 6.1. This medium-severity XSS vulnerability…
March 18, 2026CVE-2025-14792 affects the Key Figures plugin for WordPress (up to version 1.1) with a medium severity CVSS score of 4.4…
March 18, 2026CVE-2025-67931 affects the Bulletproof Security plugin for WordPress, allowing unauthenticated access to sensitive data in versions up to 6.9. Upgrade…
March 18, 2026CVE-2025-14059 affects the EmailKit plugin for WordPress (up to 1.6.1) with a medium severity CVSS score of 6.5. Authenticated attackers…
March 18, 2026CVE-2025-14468 affects the Accelerated Mobile Pages plugin (up to v1.1.9) with a medium severity CVSS score of 4.3. Patch to…
March 18, 2026CVE-2025-14891 affects the Customer Reviews for WooCommerce plugin (up to 5.93.1) with a medium severity (CVSS 6.4) due to stored…
March 18, 2026CVE-2025-14901 affects the Bit Form plugin (up to v2.21.6) with a CVSS score of 6.5. It allows unauthorized workflow execution…
March 18, 2026CVE-2025-14842 affects the Drag And Drop Multiple File Upload Contact Form 7 plugin (up to 1.3.9.2) with a CVSS score…
March 18, 2026CVE-2025-14845 affects the NS IE Compatibility Fixer plugin for WordPress (up to v2.1.5) with a medium severity (CVSS 4.3) CSRF…
March 18, 2026CVE-2025-12648 affects the WP-Members plugin (up to 3.5.4.4) with a medium severity (CVSS 5.3) authentication bypass vulnerability. Update to 3.5.4.5…
March 18, 2026CVE-2026-24634 affects the Ultimate Reviews plugin (up to version 3.2.16) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
March 18, 2026CVE-2025-69092 affects the Essential Addons For Elementor Lite plugin (up to 6.5.3) with a CVSS score of 6.4. Authenticated attackers…
March 18, 2026CVE-2025-69348 affects the Countdown For The Events Calendar plugin (up to v1.4.15) with a medium severity (CVSS 4.3) vulnerability allowing…
March 18, 2026CVE-2025-67930 affects the eHive Search plugin for WordPress (up to version 2.5.0), exposing users to reflected XSS attacks. Upgrade to…
March 18, 2026CVE-2025-9294 affects the Quiz Master Next plugin (up to version 10.3.1) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2025-9318 affects the Quiz Master Next plugin (up to 10.3.1) with a medium severity (CVSS 6.5) SQL injection vulnerability. Users…
March 18, 2026CVE-2025-14552 affects the MediaPress plugin (up to v1.6.1) with a medium severity (CVSS 6.4) XSS vulnerability. Users should update to…
March 18, 2026CVE-2026-22470 affects the Fs Real Estate Plugin (up to 2.7.11) with a medium severity (CVSS 4.9) SQL injection vulnerability. Authenticated…
March 18, 2026CVE-2025-67932 affects the Listeo Core plugin for WordPress (up to version 2.0.19) with a medium severity (CVSS 6.1) reflected XSS…
