March 18, 2026CVE-2025-13652 affects the CBX Bookmark & Favorite plugin (up to v2.0.4) with a medium severity SQL injection vulnerability (CVSS 6.5).…
March 18, 2026CVE-2025-14120 affects the Url Image Importer plugin (up to v1.0.7) with a medium severity (CVSS 6.4) stored XSS vulnerability. Update…
March 18, 2026CVE-2025-68523 affects the Spiffy Calendar plugin (up to v5.0.7) with a medium severity score of 4.3. Authenticated attackers can exploit…
March 18, 2026CVE-2025-13409 affects the Form Vibes plugin for WordPress, allowing SQL injection in versions up to 1.4.13. Administrators should upgrade to…
March 18, 2026CVE-2025-13746 affects the ForumWP plugin (up to v2.1.6) with a CVSS score of 6.4. It allows authenticated users to inject…
March 18, 2026CVE-2025-14153 affects the Page Expire Popup plugin (v1.0) with a CVSS score of 6.5. Authenticated attackers can exploit a SQL…
March 18, 2026CVE-2025-69091 affects the Demo Importer Plus plugin (up to v2.0.8) with a medium severity score of 4.3. Ensure you update…
March 18, 2026CVE-2025-67915 affects the Timetics plugin (up to v1.0.46) with a medium severity (CVSS 5.3) flaw allowing unauthorized user account creation.…
March 18, 2026CVE-2025-68558 affects the Depicter plugin for WordPress (up to 4.0.4) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized file…
March 18, 2026CVE-2025-67927 affects the Link Whisper plugin (up to version 0.8.8) with a medium severity CVSS score of 6.1 due to…
March 18, 2026CVE-2025-69345 affects the Post and Page Builder plugin (up to v1.27.9), allowing unauthorized actions by authenticated users. Upgrade to v1.27.10…
March 18, 2026CVE-2026-24356 affects the Getgenie plugin (up to v4.3.0) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized access for authenticated…
March 18, 2026CVE-2025-68507 affects the Icegram plugin (up to v3.1.35) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized actions. Update to…
March 18, 2026CVE-2025-67919 affects the Woffice Core plugin (up to version 5.4.30) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
March 18, 2026CVE-2026-24636 affects Sugar Calendar Lite plugin versions up to 3.10.1, with a CVSS score of 4.3. This medium-severity vulnerability allows…
March 18, 2026CVE-2025-67926 affects the Fluent Support plugin (up to version 1.10.4) with a CVSS score of 4.3. Ensure you update to…
March 18, 2026CVE-2026-22468 affects the Absolute Addons plugin for WordPress (up to version 1.0.14) with a medium severity CVSS score of 4.3.…
March 18, 2026CVE-2026-22466 affects the Wp Mapit plugin (up to version 3.0.3) with a medium severity CVSS score of 4.3. Authenticated users…
March 18, 2026CVE-2025-14627 affects WP Ultimate CSV Importer versions up to 7.35, allowing authenticated users to exploit SSRF vulnerabilities. Upgrade to version…
March 18, 2026CVE-2025-68509 affects the User Submitted Posts plugin for WordPress, with a medium severity CVSS of 5.3. Users should update to…
