March 18, 2026CVE-2026-1268 affects the Dynamic Widget Content plugin (up to v1.3.6) with a CVSS score of 6.4. Authenticated attackers can exploit…
March 18, 2026CVE-2025-68022 affects the BlueX for WooCommerce plugin (up to version 3.1.4) with a medium severity CVSS score of 5.3. Unauthenticated…
March 18, 2026CVE-2025-68834 affects the Product Sync Master Sheet plugin for WordPress (up to version 1.1.3) with a medium severity CVSS score…
March 18, 2026CVE-2026-1370 affects the SIBS WooCommerce plugin (up to v2.2.0) with a medium severity (CVSS 4.9) SQL injection vulnerability. Admins should…
March 18, 2026CVE-2025-14461 affects the Woo Xendit Virtual Accounts plugin (up to v6.0.2) with a CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2025-15507 affects the Magic Import Document Extractor plugin (up to version 1.0.5) with a CVSS score of 5.3. Unauthenticated attackers…
March 18, 2026CVE-2025-15508 affects the Magic Import Document Extractor plugin (up to v1.0.6) with a CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2026-0743 affects the WP Content Permission plugin (up to v1.2) with a medium severity CVSS score of 4.4. Authenticated attackers…
March 18, 2026CVE-2026-0572 affects the WebPurify Profanity Filter plugin for WordPress (up to version 4.0.2) with a CVSS score of 6.5. Unauthenticated…
March 18, 2026CVE-2025-15482 affects the Chapa Payment Gateway for WooCommerce (up to v1.0.3) with a medium severity (CVSS 5.3) vulnerability allowing unauthenticated…
March 18, 2026CVE-2026-0742 affects the Smart Appointment Booking plugin (up to version 1.0.7) with a medium severity CVSS score of 6.4. Users…
March 18, 2026CVE-2026-0816 affects the All Push Notification plugin for WordPress (up to v1.5.3) with a medium severity (CVSS 4.9) SQL injection…
March 18, 2026CVE-2025-15260 affects the Woorewards plugin (up to v5.6.1) with a medium severity (CVSS 6.5) vulnerability. Authenticated users can exploit this…
March 18, 2026CVE-2025-15487 affects the Code Explorer plugin for WordPress (up to 1.4.6) with a medium severity CVSS score of 4.9. Authenticated…
March 18, 2026CVE-2026-0679 affects the Fortis for WooCommerce plugin (up to version 1.2.0) with a medium severity (CVSS 5.3) authentication bypass vulnerability.…
March 18, 2026CVE-2026-24944 affects the Subscribe2 plugin for WordPress (up to v10.44) with a CVSS score of 5.3. Unauthenticated attackers can exploit…
March 18, 2026CVE-2026-1755 affects the Menu Icons plugin for WordPress (up to version 0.13.20) with a CVSS score of 6.4. Authenticated attackers…
March 18, 2026CVE-2026-1371 affects Tutor plugin versions up to 3.9.5 with a medium severity (CVSS 5.3). Authenticated users can access sensitive coupon…
March 18, 2026CVE-2025-67624 affects the Optimize More Images plugin for WordPress (up to version 1.1.3) with a medium severity (CVSS 5.3) vulnerability.…
March 18, 2026CVE-2026-24941 affects the WP Job Portal plugin (up to version 2.4.4) with a CVSS score of 5.3. It allows unauthorized…
