Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-49349: Reuters Direct <= 3.0.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49349 affects the Reuters Direct plugin for WordPress (up to v3.0.0) with a medium severity (CVSS 5.3). Unauthenticated attackers can…
CVE-2025-63053: Master Addons for Elementor <= 2.0.9.9.4 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63053 affects the Master Addons for Elementor plugin (up to version 2.0.9.9.4) with a medium severity (CVSS 5.3) IDOR vulnerability.…
CVE-2025-63040: Post Snippets <= 4.0.11 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63040 affects the Post Snippets plugin for WordPress (up to version 4.0.11) with a medium severity CVSS score of 4.3.…
CVE-2025-63022: Simple Like Page <= 1.5.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63022 affects the Simple Facebook Plugin (up to version 1.5.3) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
CVE-2025-63014: Gmedia Photo Gallery <= 1.24.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63014 affects the Grand Media plugin for WordPress, with a medium severity CVSS score of 4.3. Update to version 1.25.0…
CVE-2025-62138: Advanced PDF <= 1.1.7 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62138 affects the WP Advanced PDF plugin (up to version 1.1.7) with a CVSS score of 5.3. It allows unauthorized…
CVE-2025-49345: WP-EasyArchives <= 3.1.2 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49345 affects the WP Easyarchives plugin (up to v3.1.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Unauthenticated attackers can…
CVE-2025-62125: Custom Background Changer <= 3.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62125 affects the Custom Background Changer plugin for WordPress (up to version 3.0) with a CVSS score of 6.4. Authenticated…
CVE-2025-62134: Contact Form Widget <= 1.5.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62134 affects the New Contact Form Widget plugin for WordPress (up to v1.5.1) with a medium severity (CVSS 4.3) CSRF…
CVE-2025-62095: Bootstrap Modals <= 1.3.2 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62095 affects the Bootstrap Modals plugin for WordPress (up to version 1.3.2) with a CVSS score of 6.4. Authenticated users…
CVE-2025-62742: Curator.io <= 1.9.5 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62742 affects the Curatorio plugin for WordPress (up to version 1.9.5) with a CVSS score of 6.4. Authenticated users can…
CVE-2025-62149: Add Custom Codes <= 4.80 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62149 affects the Add Custom Codes plugin for WordPress (up to version 4.80) with a medium severity CVSS score of…
CVE-2025-62129: RestroPress <= 3.2.7 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62129 affects the RestroPress plugin (up to version 3.2.7) with a medium severity CVSS score of 5.3. Patch to version…
CVE-2025-62146: MX Time Zone Clocks <= 5.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62146 affects the MX Time Zone Clocks plugin (up to version 5.1.1) with a medium severity CVSS score of 6.4.…
CVE-2025-62108: Add Custom Codes <= 4.80 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62108 affects the Add Custom Codes plugin for WordPress (up to version 4.80) with a medium severity (CVSS 4.3). Patch…
CVE-2025-63005: Tooltips <= 10.8.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63005 affects the WordPress Tooltips plugin up to version 10.8.3, exposing users to stored cross-site scripting. Patch to mitigate risks…
CVE-2025-66158: Gmaper for Elementor <= 1.0.9 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-66158 affects the Gmaper Elementor plugin (up to v1.0.9) with a CVSS score of 4.3. This medium severity vulnerability allows…
CVE-2025-62756: The Moneytizer <= 10.0.9 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62756 affects The Moneytizer plugin for WordPress (up to version 10.0.9) with a medium severity CVSS score of 6.4. Patch…
CVE-2025-62758: Funnelforms Free <= 3.8 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62758 affects the Funnelforms Free plugin (up to version 3.8) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated…
CVE-2025-62150: History Timeline <= 1.0.6 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62150 affects the Timeline Awesome plugin for WordPress (up to version 1.0.6) with a medium severity CVSS score of 4.3.…
←
1
…
81
82
83
84
85
…
120
→