Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-24561: FluentBoards <= 1.91.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24561 affects the Fluent Boards plugin (up to version 1.91.1) with a medium severity CVSS score of 4.3. Patch to…
CVE-2025-69188: Fitness Trainer <= 1.7.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69188 affects the Fitness Trainer plugin for WordPress (up to version 1.7.1) with a medium severity CVSS score of 5.3.…
CVE-2026-24558: ABG Rich Pins <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24558 affects the ABG Rich Pins plugin for WordPress (up to v1.1) with a medium severity (CVSS 6.4) XSS vulnerability.…
CVE-2025-69192: Real Estate Pro <= 2.1.5 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69192 affects the Real Estate Pro plugin (v2.1.5) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Users should…
CVE-2025-67967: Lawyer Directory <= 1.3.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67967 affects the Lawyer Directory plugin (up to v1.3.3) with a CVSS score of 4.3. It allows authenticated users to…
CVE-2025-67956: User Registration <= 4.4.6 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67956 affects the User Registration plugin for WordPress (up to 4.4.6) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
CVE-2026-24572: Nelio Content <= 4.2.0 Authenticated (Contributor+) SQL Injection PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24572 affects the Nelio Content plugin for WordPress (up to version 4.2.0) with a medium severity score of 6.5. Authenticated…
CVE-2026-24571: BOX NOW Delivery <= 3.0.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24571 affects the Box Now Delivery plugin (versions ≤3.0.2) with a medium severity (CVSS 4.3). It allows authenticated attackers to…
CVE-2026-24557: Contact Form 7 GetResponse Extension <= 1.0.8 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24557 affects the Contact Form 7 GetResponse Extension plugin (up to v1.0.8) with a CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-24562: Ryviu – Product Reviews for WooCommerce <= 3.1.26 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24562 affects the Ryviu plugin (up to version 3.1.26) with a medium severity CVSS score of 5.3. It allows unauthorized…
CVE-2026-1036: Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 Missing Authorization to Unauthenticated Arbitrary Comment Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1036 affects the Photo Gallery plugin (up to v1.8.36) with a CVSS score of 5.3. Unauthenticated attackers can delete image…
CVE-2026-24556: ElementCamp <= 2.3.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24556 affects the Element Camp plugin (up to v2.3.2) with a CVSS score of 5.3, allowing unauthorized access. Update to…
CVE-2025-68035: Tabby Checkout <= 5.8.4 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68035 affects the Tabby Checkout plugin for WordPress (up to version 5.8.4) with a CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-24568: Travel <= 11.1.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24568 affects the Wp Travel plugin (up to version 11.1.0) with a CVSS score of 5.3. This medium severity vulnerability…
CVE-2025-67961: WPO365 <= 40.0 Authenticated (Subscriber+) Server-Side Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67961 affects the WPO365 Login plugin (up to version 40.0) with a medium severity (CVSS 6.4) SSRF vulnerability. Users should…
CVE-2026-24566: iNET Webkit <= 1.2.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24566 affects the iNET Webkit plugin for WordPress (v1.2.4) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions by…
CVE-2026-24564: Textmetrics <= 3.6.3 Authenticated (Subscriber+) Arbitrary Shortcode Execution PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24564 affects the Webtexttool plugin (up to v3.6.3) with a medium severity (CVSS 5.4) remote code execution vulnerability. Users should…
CVE-2026-24565: B Accordion <= 2.0.2 Authenticated (Contributor+) Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24565 affects the B Accordion plugin (up to version 2.0.2) with a CVSS score of 4.3. Authenticated users can access…
CVE-2025-68039: BackItUp <= 2.1.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68039 affects the Wp Backitup plugin (up to v2.1.0) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Users…
CVE-2026-24570: Edwiser Bridge <= 4.3.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24570 affects the Edwiser Bridge plugin (up to v4.3.2) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions by…
←
1
…
84
85
86
87
88
…
120
→