Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-24982: Spectra <= 2.19.17 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24982 affects the Ultimate Addons For Gutenberg plugin (up to version 2.19.17) with a CVSS score of 5.3. Unauthenticated users…
CVE-2026-24984: Visual Link Preview <= 2.2.9 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24984 affects the Visual Link Preview plugin (up to v2.2.9) with a CVSS score of 4.3. Authenticated attackers can exploit…
CVE-2026-24588: Smart Product Viewer <= 1.5.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24588 affects the Smart Product Viewer plugin (up to v1.5.4) with a medium severity (CVSS 4.3) flaw allowing unauthorized actions…
CVE-2026-24585: Hyyan WooCommerce Polylang Integration <= 1.5.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24585 affects the Woo Poly Integration plugin (up to v1.5.0) with a CVSS score of 4.3. This medium-severity vulnerability allows…
CVE-2026-24584: Tutor LMS BunnyNet Integration <= 1.0.0 Authenticated (Tutor instructor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24584 affects the Tutor LMS BunnyNet Integration plugin (up to v1.0.0) with a medium severity CVSS score of 6.4. Authenticated…
CVE-2025-68073: GDPR CCPA Compliance Support <= 2.7.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68073 affects the Ninja GDPR Compliance plugin (up to 2.7.4) with a medium severity score of 4.3. Authenticated attackers can…
CVE-2025-68018: Order Listener for WooCommerce <= 3.6.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68018 affects the Woc Order Alert plugin for WordPress (up to version 3.6.1) with a CVSS score of 5.3. Users…
CVE-2025-68836: Table of Contents Creator <= 1.6.4.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68836 affects the Table Of Contents Creator plugin for WordPress (up to 1.6.4.1) with a medium severity CVSS score of…
CVE-2026-24583: SumUp Payment Gateway For WooCommerce <= 2.7.9 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24583 affects the SumUp Payment Gateway for WooCommerce plugin (up to 2.7.9) with a medium severity CVSS score of 5.3.…
CVE-2025-68894: ShoutOut <= 4.0.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68894 affects the Shoutout plugin (up to version 4.0.2) with a medium severity CVSS score of 6.1 due to reflected…
CVE-2025-68004: My Post Order <= 1.2.1.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68004 affects the My Posts Order plugin for WordPress (up to v1.2.1.1) with a medium severity CVSS score of 6.1.…
CVE-2026-25453: Advanced iFrame <= 2025.10 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-25453 affects the Advanced Iframe plugin for WordPress versions up to 2025.10, exposing users to stored XSS attacks. Upgrade to…
CVE-2025-68019: SEO Booster <= 6.1.8 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68019 affects the SEO Booster plugin (versions up to 6.1.8) with a medium severity (CVSS 5.3) due to missing capability…
CVE-2025-15466: Image Photo Gallery Final Tiles Grid <= 3.6.9 Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-15466 affects the Final Tiles Grid Gallery Lite plugin (up to version 3.6.9) with a medium severity (CVSS 5.4) vulnerability…
CVE-2026-24587: AJAX Hits Counter + Popular Posts Widget <= 0.10.210305 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24587 affects the Ajax Hits Counter plugin (versions
CVE-2025-69300: Premium Addons for Elementor <= 4.11.63 Missing Authorization to Authenticated (Subscriber+) Settings Update PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69300 affects the Premium Addons for Elementor plugin (up to v4.11.63) with a CVSS score of 4.3. Authenticated attackers can…
CVE-2026-24355: Houzez Theme Functionality <= 4.2.6 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24355 affects the Houzez Theme - Functionality plugin (up to version 4.2.6) with a CVSS score of 6.4. Authenticated attackers…
CVE-2026-24992: Advanced WooCommerce Product Sales Reporting <= 4.1.2 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24992 affects the Webd Woocommerce Advanced Reporting Statistics plugin (up to v4.1.2) with a medium severity (CVSS 5.3) vulnerability allowing…
CVE-2025-67969: UPI QR Code Payment Gateway for WooCommerce <= 1.5.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67969 affects the UPI QR Code Payment for WooCommerce plugin (up to v1.5.1) with a medium severity (CVSS 5.3). Unauthenticated…
CVE-2026-24550: Blockons <= 1.2.15 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24550 affects the Blockons plugin for WordPress (up to version 1.2.15) with a medium severity CVSS score of 6.4. Authenticated…
←
1
…
87
88
89
90
91
…
120
→