Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-62758: Funnelforms Free <= 3.8 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62758 affects the Funnelforms Free plugin (up to version 3.8) with a medium severity (CVSS 6.4) stored XSS vulnerability. Authenticated…
CVE-2025-49346: Simple Archive Generator <= 5.2 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49346 affects the Simple Archive Generator plugin for WordPress (up to v5.2) with a Medium severity (CVSS 4.3) CSRF vulnerability.…
CVE-2025-49338: Flowbox <= 1.1.5 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49338 affects the Flowbox plugin for WordPress (up to version 1.1.5) with a medium severity score of 5.3. Unauthenticated attackers…
CVE-2025-69054: Super Logos Showcase <= 2.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69054 affects the Super Logos Showcase plugin for WordPress (up to version 2.8) with a medium severity CVSS score of…
CVE-2025-62992: Everest Backup <= 2.3.9 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62992 affects the Everest Backup plugin for WordPress (up to version 2.3.9) with a medium severity CVSS score of 4.3.…
CVE-2025-62140: Locatoraid Store Locator <= 3.9.65 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62140 affects the Locatoraid plugin (up to version 3.9.65) with a medium severity CVSS score of 4.4. Admin-level users can…
CVE-2025-63021: Valenti Engine <= 1.0.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63021 affects the Valenti Engine plugin for WordPress (up to version 1.0.3) with a medium severity (CVSS 6.4) Stored XSS…
CVE-2025-69056: Hotel Listing <= 1.4.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
The Hotel Listing plugin for WordPress (up to version 1.4.0) has a medium severity XSS vulnerability (CVE-2025-69056) due to poor…
CVE-2025-14428: My Sticky Elements <= 2.3.3 Missing Authorization to Authenticated (Subscriber+) Arbitrary Bulk Lead Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14428 affects the My Sticky Elements plugin (up to v2.3.3) with a CVSS score of 4.3. Authenticated users can delete…
CVE-2025-62133: FormFacade <= 1.4.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62133 affects the FormFacade plugin for WordPress (up to v1.4.1) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure to…
CVE-2025-63038: Custom Admin Interface <= 7.40 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63038 affects the Wp Custom Admin Interface plugin (up to version 7.40) with a medium severity CVSS score of 4.3.…
CVE-2025-49355: Accessibility Press <= 1.0.2 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-49355 affects the Ilogic Accessibility plugin for WordPress (up to version 1.0.2) with a medium severity score of 4.4. Admin-level…
CVE-2025-62757: WebMan Amplifier <= 1.5.12 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62757 affects the Webman Amplifier plugin for WordPress (up to version 1.5.12) with a medium severity (CVSS 6.4) stored XSS…
CVE-2025-62142: Post Video Players <= 1.163 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62142 affects the Video Playlist And Gallery Plugin (up to 1.163) with a medium severity (CVSS 4.4) stored XSS vulnerability.…
CVE-2025-62744: Page Title Splitter <= 2.5.9 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62744 affects the Page Title Splitter plugin (up to version 2.5.9) with a medium severity CVSS of 6.4. Authenticated users…
CVE-2025-62098: Portfolio Gallery <= 1.4.8 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62098 affects the Gallery Portfolio plugin for WordPress (versions up to 1.4.8) with a medium severity CVSS score of 4.3.…
CVE-2025-63000: Sermon Manager <= 2.30.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-63000 affects the Sermon Manager plugin for WordPress (up to 2.30.0) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
CVE-2025-59135: Behance Portfolio Manager <= 1.7.5 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-59135 affects the Portfolio Manager Powered By Behance plugin (up to v1.7.5) with a medium severity score of 4.4. Patch…
CVE-2025-62143: Post Video Players <= 1.163 Authenticated (Contributor+) Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-62143 affects the Video Playlist And Gallery Plugin for WordPress, versions up to 1.163. This medium-severity vulnerability allows authenticated users…
CVE-2025-59137: Behance Portfolio Manager <= 1.7.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-59137 affects the Portfolio Manager Powered By Behance plugin (up to v1.7.5) with a medium severity CVSS score of 4.3.…
←
1
…
82
83
84
85
86
…
120
→