Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-68509: User Submitted Posts <= 20251121 Unauthenticated Open Redirect PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68509 affects the User Submitted Posts plugin for WordPress, with a medium severity CVSS of 5.3. Users should update to…
CVE-2026-22461: CTX Feed <= 6.6.18 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22461 affects the Webappick Product Feed For Woocommerce plugin (up to version 6.6.18) with a CVSS score of 5.3. Unauthenticated…
CVE-2025-68044: Five Star Restaurant Reservations <= 2.7.4 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68044 affects the Restaurant Reservations plugin (up to v2.7.4) with a medium severity CVSS score of 5.3. Unauthenticated users can…
CVE-2025-47555: Tutor LMS <= 3.9.4 Authenticated (Instructor+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-47555 affects Tutor LMS plugin versions up to 3.9.4, allowing authenticated users to exploit insecure object references. Update to version…
CVE-2025-63019: Cookies and Content Security Policy <= 2.34 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63019 affects the Cookies And Content Security Policy plugin (up to v2.34) with a CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-22445: Apimo Connector <= 2.6.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22445 affects the Apimo Connector plugin for WordPress (up to 2.6.4) with a medium severity (CVSS 5.3) due to missing…
CVE-2026-22463: Form to Chat App <= 1.2.5 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22463 affects the Form To Chat plugin (up to version 1.2.5) with a medium severity CVSS score of 6.4. Authenticated…
CVE-2025-68529: Email Capture <= 3.12.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68529 affects WP Email Capture plugin versions up to 3.12.5, exposing a medium severity CSRF vulnerability (CVSS 4.3). Upgrade to…
CVE-2025-69341: WeDesignTech Ultimate Booking Addon <= 1.0.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69341 affects the WeDesignTech Ultimate Booking Addon plugin for WordPress (up to v1.0.3) with a medium severity (CVSS 4.3). Patch…
CVE-2025-68867: Effect Maker <= 1.2.1 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68867 affects the Effect Maker plugin for WordPress (up to version 1.2.1) with a medium severity CVSS score of 6.4.…
CVE-2025-62113: Co-marquage service-public.fr <= 0.5.77 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62113 affects the Co Marquage Service Public plugin for WordPress (up to 0.5.77) with a medium severity (CVSS 4.3) CSRF…
CVE-2025-62743: MyBookTable Bookstore <= 3.5.6 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62743 affects the MyBookTable plugin for WordPress (up to 3.5.6) with a medium severity (CVSS 6.4) due to stored XSS.…
CVE-2026-22388: Owl Carousel WP <= 2.2.2 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22388 affects the Owl Carousel WP plugin (up to 2.2.2) with a medium severity CVSS score of 4.4. Authenticated attackers…
CVE-2025-69055: BM Content Builder < 3.16.3.3 Authenticated (Contributor+) Arbitrary File Download PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69055 affects the BM Builder plugin for WordPress, allowing authenticated users to read arbitrary files due to a path traversal…
CVE-2025-14047: WP User Frontend <= 4.2.4 Missing Authorization to Unauthenticated Arbitrary Attachment Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14047 affects the WP User Frontend plugin (up to version 4.2.4) with a CVSS score of 5.3. It allows unauthenticated…
CVE-2025-49349: Reuters Direct <= 3.0.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49349 affects the Reuters Direct plugin for WordPress (up to v3.0.0) with a medium severity (CVSS 5.3). Unauthenticated attackers can…
CVE-2025-63053: Master Addons for Elementor <= 2.0.9.9.4 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63053 affects the Master Addons for Elementor plugin (up to version 2.0.9.9.4) with a medium severity (CVSS 5.3) IDOR vulnerability.…
CVE-2025-63040: Post Snippets <= 4.0.11 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63040 affects the Post Snippets plugin for WordPress (up to version 4.0.11) with a medium severity CVSS score of 4.3.…
CVE-2025-63022: Simple Like Page <= 1.5.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63022 affects the Simple Facebook Plugin (up to version 1.5.3) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
CVE-2025-63014: Gmedia Photo Gallery <= 1.24.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63014 affects the Grand Media plugin for WordPress, with a medium severity CVSS score of 4.3. Update to version 1.25.0…
←
1
…
80
81
82
83
84
…
120
→