March 18, 2026CVE-2026-24575 affects the WishList Member X plugin (up to v3.29.0) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions…
March 18, 2026CVE-2025-15043 affects The Events Calendar plugin (up to version 6.15.13) with a medium severity (CVSS 5.4) vulnerability. Patch to 6.15.13.1…
March 18, 2026CVE-2025-68030 affects the Frontis Blocks plugin (up to v1.1.5) with a medium severity CVSS score of 6.5. Patch to v1.1.6…
March 18, 2026CVE-2025-68858 affects the wpCAS plugin (v1.07) with a medium severity score of 6.1 due to reflected cross-site scripting. Users should…
March 18, 2026CVE-2025-68835 affects the Ravpage plugin for WordPress (up to version 2.33) with a medium severity CVSS score of 6.1. Users…
March 18, 2026CVE-2025-68882 affects the Scalenut WordPress plugin (up to version 1.1.3) with a medium severity CVSS score of 5.3. Ensure you…
March 18, 2026CVE-2025-68838 affects the MemberPress Discord Addon plugin for WordPress (up to version 1.1.4) with a CVSS score of 6.1. Ensure…
March 18, 2026CVE-2025-12573 affects the Bookingor plugin for WordPress (up to version 1.0.12) with a medium severity CVSS score of 4.3. Update…
March 18, 2026CVE-2025-68839 reveals a medium severity XSS vulnerability in the Easy Theme Options plugin for WordPress, allowing unauthenticated attackers to inject…
March 18, 2026CVE-2026-24580 affects the Ecwid Shopping Cart plugin (up to v7.0.5) with a medium severity (CVSS 4.3) vulnerability. Update to v7.0.6…
March 18, 2026CVE-2025-69311 affects the Broadstreet WordPress plugin (up to version 1.52.1) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized access.…
March 18, 2026CVE-2025-14798 affects LearnPress plugin versions up to 4.3.2.4, allowing unauthenticated attackers to access sensitive user data. Upgrade to version 4.3.2.5…
March 18, 2026CVE-2025-69313 affects the Ultimate Post plugin (versions
March 18, 2026CVE-2026-1051 affects the Newsletter plugin for WordPress versions up to 9.1.0, exposing users to Cross-Site Request Forgery. Upgrade to 9.1.1…
March 18, 2026CVE-2025-14978 affects the Peachpay for WooCommerce plugin (up to version 1.119.8) with a medium severity CVSS score of 5.3. Unauthenticated…
March 18, 2026CVE-2026-1045 affects the Viet Contact plugin for WordPress (up to 1.3.2) with a CVSS score of 4.4. This medium severity…
March 18, 2026CVE-2025-14348 affects the weMail plugin (up to v2.0.7) with a CVSS score of 5.3. Unauthenticated attackers can bypass authentication to…
March 18, 2026CVE-2025-14351 affects the Custom Fonts plugin (up to v2.1.16) with a CVSS score of 5.3. This medium-severity flaw allows unauthenticated…
March 18, 2026CVE-2026-1042 affects the WP Hello Bar plugin (up to v1.02) with a medium severity CVSS score of 4.4. Authenticated attackers…
March 18, 2026CVE-2026-24581 affects the Points And Rewards For WooCommerce plugin (up to v2.9.5) with a CVSS score of 4.3. Authenticated users…
