March 18, 2026CVE-2025-68039 affects the Wp Backitup plugin (up to v2.1.0) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Users…
March 18, 2026CVE-2026-0548 affects Tutor plugin versions up to 3.9.4, allowing authenticated users to delete attachments due to a missing capability check.…
March 18, 2026CVE-2026-24577 affects the Pie Register plugin for WordPress (up to version 3.8.4.7) with a CVSS score of 5.3. It allows…
March 18, 2026CVE-2026-0608 affects the Head Meta Data plugin for WordPress, allowing authenticated users to inject scripts due to insufficient input sanitization.…
March 18, 2026CVE-2026-0690 affects the FlatPM plugin for WordPress, with a medium severity CVSS score of 6.4. Users should upgrade to version…
March 18, 2026CVE-2026-0554 affects the NotificationX plugin (up to version 3.1.11) with a medium severity (CVSS 4.3) vulnerability. Ensure you update to…
March 18, 2026CVE-2025-67958 affects the Simple Sales Tax plugin for WordPress (up to version 8.3.8) with a CVSS score of 5.3. Unauthenticated…
March 18, 2026CVE-2026-24567 affects the Anything Order By Terms plugin for WordPress, allowing authenticated users to perform unauthorized actions. Users should update…
March 18, 2026CVE-2026-24569 affects the Media Library File Size plugin for WordPress (up to v1.6.7) with a CVSS score of 4.3. Patch…
March 18, 2026CVE-2025-69180 affects the Ultra Portfolio plugin for WordPress (up to version 6.7) with a medium severity CVSS score of 6.5.…
March 18, 2026CVE-2025-68046 affects the Lead Form Builder plugin for WordPress, allowing authenticated users to access sensitive data. Update to version 2.0.3…
March 18, 2026CVE-2025-68020 affects the WANotifier plugin (up to v2.7.12) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Update to…
March 18, 2026CVE-2026-24575 affects the WishList Member X plugin (up to v3.29.0) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions…
March 18, 2026CVE-2025-15043 affects The Events Calendar plugin (up to version 6.15.13) with a medium severity (CVSS 5.4) vulnerability. Patch to 6.15.13.1…
March 18, 2026CVE-2026-24578 affects the Admin Login Url Change plugin (up to v1.1.5) with a medium severity CVSS score of 4.3. Authenticated…
March 18, 2026CVE-2026-24986 affects the Simple Membership WP User Import plugin (up to v1.9.1) with a medium severity score of 4.3 due…
March 18, 2026CVE-2026-24576 affects the Ux Flat plugin for WordPress (up to version 5.4.0) with a medium severity CVSS score of 6.4.…
March 18, 2026CVE-2025-68840 affects the iRobots.txt SEO plugin for WordPress (up to version 1.1.2) with a medium severity (CVSS 6.1) reflected XSS…
March 18, 2026CVE-2025-69316 affects the Posts Table Filterable plugin for WordPress (up to version 1.0.4.2) with a CVSS score of 6.1. Ensure…
March 18, 2026CVE-2026-25451 affects the Bold Page Builder plugin (up to version 5.6.7) with a medium severity CVSS score of 6.4. Authenticated…
