Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-63019: Cookies and Content Security Policy <= 2.34 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63019 affects the Cookies And Content Security Policy plugin (up to v2.34) with a CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-22445: Apimo Connector <= 2.6.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22445 affects the Apimo Connector plugin for WordPress (up to 2.6.4) with a medium severity (CVSS 5.3) due to missing…
CVE-2026-22463: Form to Chat App <= 1.2.5 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22463 affects the Form To Chat plugin (up to version 1.2.5) with a medium severity CVSS score of 6.4. Authenticated…
CVE-2026-22462: Add Polylang support for Customizer <= 1.4.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22462 affects the Add Polylang Support For Customizer plugin (up to version 1.4.5) with a medium severity CVSS score of…
CVE-2026-22468: Absolute Addons For Elementor <= 1.0.14 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22468 affects the Absolute Addons plugin for WordPress (up to version 1.0.14) with a medium severity CVSS score of 4.3.…
CVE-2026-22466: MapIt <= 3.0.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22466 affects the Wp Mapit plugin (up to version 3.0.3) with a medium severity CVSS score of 4.3. Authenticated users…
CVE-2025-14627: WP Import – Ultimate CSV XML Importer for WordPress <= 7.35 Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink Bypass PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14627 affects WP Ultimate CSV Importer versions up to 7.35, allowing authenticated users to exploit SSRF vulnerabilities. Upgrade to version…
CVE-2025-68529: Email Capture <= 3.12.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68529 affects WP Email Capture plugin versions up to 3.12.5, exposing a medium severity CSRF vulnerability (CVSS 4.3). Upgrade to…
CVE-2025-69341: WeDesignTech Ultimate Booking Addon <= 1.0.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69341 affects the WeDesignTech Ultimate Booking Addon plugin for WordPress (up to v1.0.3) with a medium severity (CVSS 4.3). Patch…
CVE-2025-68867: Effect Maker <= 1.2.1 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68867 affects the Effect Maker plugin for WordPress (up to version 1.2.1) with a medium severity CVSS score of 6.4.…
CVE-2025-62113: Co-marquage service-public.fr <= 0.5.77 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62113 affects the Co Marquage Service Public plugin for WordPress (up to 0.5.77) with a medium severity (CVSS 4.3) CSRF…
CVE-2025-62743: MyBookTable Bookstore <= 3.5.6 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62743 affects the MyBookTable plugin for WordPress (up to 3.5.6) with a medium severity (CVSS 6.4) due to stored XSS.…
CVE-2026-22388: Owl Carousel WP <= 2.2.2 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-22388 affects the Owl Carousel WP plugin (up to 2.2.2) with a medium severity CVSS score of 4.4. Authenticated attackers…
CVE-2025-69055: BM Content Builder < 3.16.3.3 Authenticated (Contributor+) Arbitrary File Download PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69055 affects the BM Builder plugin for WordPress, allowing authenticated users to read arbitrary files due to a path traversal…
CVE-2025-14047: WP User Frontend <= 4.2.4 Missing Authorization to Unauthenticated Arbitrary Attachment Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14047 affects the WP User Frontend plugin (up to version 4.2.4) with a CVSS score of 5.3. It allows unauthenticated…
CVE-2025-49345: WP-EasyArchives <= 3.1.2 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49345 affects the WP Easyarchives plugin (up to v3.1.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Unauthenticated attackers can…
CVE-2025-62125: Custom Background Changer <= 3.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62125 affects the Custom Background Changer plugin for WordPress (up to version 3.0) with a CVSS score of 6.4. Authenticated…
CVE-2025-62121: Logo Slider , Logo Carousel , Logo showcase , Client Logo <= 1.8.1 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62121 affects the Tc Logo Slider plugin for WordPress (up to v1.8.1) with a medium severity CVSS score of 4.4.…
CVE-2025-66150: Appender <= 1.1.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-66150 affects the Appender plugin for WordPress (up to v1.1.1) with a medium severity CVSS score of 4.3. Ensure you…
CVE-2025-69084: Photo Gallery <= 2.7.7.26 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69084 affects the Gt3 Photo Video Gallery plugin (versions up to 2.7.7.26) with a medium severity CVSS score of 6.1.…
←
1
…
80
81
82
83
84
…
120
→