March 18, 2026CVE-2026-22481 affects the Bd Courier Order Ratio Checker plugin (up to v2.0.1) with a medium severity score of 4.3. Authenticated…
March 18, 2026CVE-2025-67930 affects the eHive Search plugin for WordPress (up to version 2.5.0), exposing users to reflected XSS attacks. Upgrade to…
March 18, 2026CVE-2025-9294 affects the Quiz Master Next plugin (up to version 10.3.1) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
March 18, 2026CVE-2025-9318 affects the Quiz Master Next plugin (up to 10.3.1) with a medium severity (CVSS 6.5) SQL injection vulnerability. Users…
March 18, 2026CVE-2025-14552 affects the MediaPress plugin (up to v1.6.1) with a medium severity (CVSS 6.4) XSS vulnerability. Users should update to…
March 18, 2026CVE-2026-22470 affects the Fs Real Estate Plugin (up to 2.7.11) with a medium severity (CVSS 4.9) SQL injection vulnerability. Authenticated…
March 18, 2026CVE-2025-14438 affects the Xagio SEO plugin (up to v7.1.0.30) with a medium severity CVSS score of 6.4. Authenticated attackers can…
March 18, 2026CVE-2025-13964 affects the LearnPress plugin (up to version 4.3.2) with a medium severity CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2025-13812 affects GamiPress plugin version 7.6.1, allowing authenticated users to access sensitive data due to a missing capability check. Upgrade…
March 18, 2026CVE-2025-13766 affects the MasterStudy LMS plugin (up to v3.7.6) with a CVSS score of 5.4. It allows authenticated users to…
March 18, 2026CVE-2025-12067 affects the Advanced Custom Fields Table Field plugin (up to 1.3.30) with a medium severity CVSS score of 6.4.…
March 18, 2026CVE-2025-9637 affects the Quiz Master Next plugin (up to v10.3.1) with a medium severity CVSS score of 6.5. Unauthenticated attackers…
March 18, 2026CVE-2025-13215 affects Auxin Elements plugin (up to v2.17.13) with a medium severity (CVSS 5.3) vulnerability. Unauthenticated attackers can access draft…
March 18, 2026CVE-2025-5919 affects the Timetics plugin for WordPress (up to 1.0.36) with a medium severity (CVSS 6.5) vulnerability allowing unauthorized access…
March 18, 2026CVE-2025-14371 affects the Simple Tags plugin (up to v3.41.0) with a medium severity (CVSS 4.3). Authenticated users can modify post…
March 18, 2026CVE-2025-13652 affects the CBX Bookmark & Favorite plugin (up to v2.0.4) with a medium severity SQL injection vulnerability (CVSS 6.5).…
March 18, 2026CVE-2025-14120 affects the Url Image Importer plugin (up to v1.0.7) with a medium severity (CVSS 6.4) stored XSS vulnerability. Update…
March 18, 2026CVE-2025-68523 affects the Spiffy Calendar plugin (up to v5.0.7) with a medium severity score of 4.3. Authenticated attackers can exploit…
March 18, 2026CVE-2025-13409 affects the Form Vibes plugin for WordPress, allowing SQL injection in versions up to 1.4.13. Administrators should upgrade to…
March 18, 2026CVE-2025-13746 affects the ForumWP plugin (up to v2.1.6) with a CVSS score of 6.4. It allows authenticated users to inject…
