March 18, 2026CVE-2026-24950 affects the Authorsy plugin (up to 1.0.6) with a CVSS score of 5.3. Unauthenticated attackers can access sensitive author…
March 18, 2026CVE-2026-24948 affects the Reflector plugin for WordPress (up to 1.2.2) with a medium severity (CVSS 6.1) XSS vulnerability. Users should…
March 18, 2026CVE-2026-24946 affects the Woocommerce Delivery Notes plugin (up to v5.8.0) with a medium severity CVSS score of 5.3, allowing unauthorized…
March 18, 2026CVE-2026-0681 affects the Extended Random Number Generator plugin for WordPress (up to version 1.1) with a medium severity CVSS score…
March 18, 2026CVE-2026-1369 affects the Conditional CAPTCHA plugin for WordPress (up to version 4.0.0) with a CVSS score of 5.3. Unauthenticated attackers…
March 18, 2026CVE-2026-0950 affects the Ultimate Addons For Gutenberg plugin (up to v2.19.17) with a medium severity (CVSS 5.3) information disclosure vulnerability.…
March 18, 2026CVE-2026-25023 affects the Contest Code Checker plugin (up to version 2.0.7), allowing unauthenticated attackers to access sensitive data. Apply the…
March 18, 2026CVE-2026-0909 affects the WP ULike plugin (up to version 4.8.3.1) with a medium severity (CVSS 5.3) vulnerability. Authenticated users can…
March 18, 2026CVE-2025-14274 affects the Unlimited Elements For Elementor plugin (up to v2.0.1) with a CVSS score of 5.4. Authenticated attackers can…
March 18, 2026CVE-2026-25024 affects the ThirstyAffiliates plugin (up to v3.11.9) with a medium severity (CVSS 4.3) CSRF vulnerability. Update to v3.11.10 to…
March 18, 2026CVE-2026-1447 affects the Mail Mint plugin (up to version 1.19.2) with a medium severity score of 5.4. Unauthenticated attackers can…
March 18, 2026CVE-2026-1210 affects the Happy Elementor Addons plugin (up to version 3.20.7) with a medium severity CVSS score of 6.4. Authenticated…
March 18, 2026CVE-2025-15525 affects the Ajax Load More plugin (up to version 7.8.1) with a CVSS score of 5.3. This medium-severity flaw…
March 18, 2026CVE-2026-25021 affects the Mizan Demo Importer plugin (up to version 0.1.3) with a medium severity CVSS score of 4.3. Patch…
March 18, 2026CVE-2025-68042 affects the Travelpayouts WordPress plugin (up to v1.2.1) with a CVSS score of 4.3. It allows authenticated users to…
March 18, 2026CVE-2026-25391 affects the Ai Content Generation plugin for WordPress (up to v1.3.07) with a medium severity CVSS of 4.3. Authenticated…
March 18, 2026CVE-2026-25399 affects the Cryout Serious Slider plugin (up to v1.2.7) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions…
March 18, 2026CVE-2026-0683 affects the SupportCandy plugin (up to 3.4.4) with a medium severity SQL injection vulnerability (CVSS 6.5). Users should upgrade…
March 18, 2026CVE-2026-1431 affects the Booking Calendar plugin (up to version 10.14.13) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
March 18, 2026CVE-2026-25019 affects Atarim Visual Collaboration plugin versions up to 4.3.1, allowing unauthorized access due to a missing capability check. Upgrade…
