March 18, 2026CVE-2026-1401 affects the Tune Library plugin for WordPress (up to 1.6.3) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
March 18, 2026CVE-2025-68032 affects the Advanced WC Analytics plugin (up to version 3.19.0), allowing unauthorized access to settings. With a CVSS score…
March 18, 2026CVE-2025-68852 affects the Court Reservation plugin for WordPress (up to 1.10.8) with a medium severity CVSS score of 6.1 due…
March 18, 2026CVE-2026-25028 affects the ElementInvader Addons for Elementor plugin (up to version 1.4.1) with a CVSS score of 4.3. Authenticated users…
March 18, 2026CVE-2026-1927 affects the Greenshift Animation And Page Builder Blocks plugin (up to v12.6) with a CVSS score of 5.4. Authenticated…
March 18, 2026CVE-2025-68026 affects the Ghl Wizard plugin (up to v2.1.1) with a CVSS score of 5.3. Unauthenticated attackers can modify settings,…
March 18, 2026CVE-2026-1246 affects the ShortPixel Image Optimizer plugin (up to version 6.4.2) with a medium severity (CVSS 4.9) file upload vulnerability.…
March 18, 2026CVE-2025-14079 affects the Elex Helpdesk Customer Support Ticket System plugin (up to 3.3.5) with a medium severity CVSS score of…
March 18, 2026CVE-2026-1271 affects the ProfileGrid User Profiles plugin (up to version 5.9.7.2) with a medium severity (CVSS 5.3). Authenticated users can…
March 18, 2026CVE-2026-1654 affects the Peters Date Countdown plugin (up to v2.0.0) with a medium severity CVSS score of 6.1 due to…
March 18, 2026CVE-2025-13416 affects the ProfileGrid User Profiles plugin (up to 5.9.7.2) with a CVSS score of 4.3. Authenticated users can suspend…
March 18, 2026CVE-2025-68025 affects the Addonify Floating Cart plugin for WordPress (v1.2.17 and below) with a medium severity CVSS score of 5.3.…
March 18, 2026CVE-2025-68863 affects the iContact for Gravity Forms plugin (up to version 1.3.2) with a medium severity CVSS score of 6.1.…
March 18, 2026CVE-2026-0867 affects the Essential Widgets plugin for WordPress (up to version 3.0) with a medium severity XSS vulnerability. Users should…
March 18, 2026CVE-2025-68037 affects the Export Media URLs plugin for WordPress (up to version 2.2) with a medium severity CVSS score of…
March 18, 2026CVE-2025-68022 affects the BlueX for WooCommerce plugin (up to version 3.1.4) with a medium severity CVSS score of 5.3. Unauthenticated…
March 18, 2026CVE-2025-68834 affects the Product Sync Master Sheet plugin for WordPress (up to version 1.1.3) with a medium severity CVSS score…
March 18, 2026CVE-2025-68024 affects the Addonify Wishlist plugin (up to v2.0.15) with a medium severity (CVSS 5.3) remote code execution flaw. Users…
March 18, 2026CVE-2026-24988 affects The Events Calendar Shortcode plugin (up to v3.1.1) with a medium severity CVSS score of 6.4. Authenticated attackers…
March 18, 2026CVE-2025-68023 affects the Addonify Compare Products plugin (up to v1.1.17) with a medium severity (CVSS 5.3) remote code execution vulnerability.…
