March 18, 2026CVE-2026-1165 affects the Ays Popup Box plugin (up to v6.1.1) with a medium severity (CVSS 4.3) Cross-Site Request Forgery vulnerability.…
March 18, 2026CVE-2025-15510 affects the Nex Forms Express WP Form Builder plugin (up to version 9.1.8) with a medium severity (CVSS 5.3)…
March 18, 2026CVE-2025-15525 affects the Ajax Load More plugin (up to version 7.8.1) with a CVSS score of 5.3. This medium-severity flaw…
March 18, 2026CVE-2026-25020 affects the WP Sync for Notion plugin (up to v1.7.0) with a CVSS score of 4.3. Authenticated users can…
March 18, 2026CVE-2026-25014 affects Enteraddons plugin versions up to 2.3.2, exposing a medium severity CSRF vulnerability. Upgrade to 2.3.3 to mitigate risks…
March 18, 2026CVE-2026-25015 affects the UsersWP plugin (up to version 1.2.53) with a medium severity CVSS score of 4.3. Patch to version…
March 18, 2026CVE-2026-24368 affects The Grid plugin for WordPress (up to version 2.8.0) with a CVSS score of 5.3. Unauthenticated attackers can…
March 18, 2026CVE-2025-68854 affects the Id Arrays plugin for WordPress (up to version 2.1.2) with a medium severity (CVSS 6.1) reflected XSS…
March 18, 2026CVE-2026-25418 affects the Bit Form plugin for WordPress (up to v2.21.10) with a medium severity score of 4.9. Admin-level users…
March 18, 2026CVE-2025-68051 affects the Shiprocket plugin for WordPress (up to version 2.0.8) with a medium severity (CVSS 4.3) IDOR vulnerability. Authenticated…
March 18, 2026CVE-2026-25407 affects the Cookiebot plugin (up to v4.6.4) with a medium severity (CVSS 4.3) vulnerability allowing remote code execution. Update…
March 18, 2026CVE-2025-68005 affects the Easy Hotel Booking plugin (up to v1.8.4) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized access.…
March 18, 2026CVE-2026-25016 affects the Nelio Popups plugin (v1.3.5) with a medium severity score of 4.3. Authenticated users can exploit this flaw…
March 18, 2026CVE-2026-25408 affects the Broken Link Notifier plugin (up to v1.3.5) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access.…
March 18, 2026CVE-2026-24383 affects the B Slider plugin for WordPress (up to 2.0.6) with a medium severity CVSS score of 6.4. Authenticated…
March 18, 2026CVE-2026-24357 affects WP Recipe Maker plugin versions up to 10.2.4, allowing unauthorized actions by authenticated users. Upgrade to version 10.3.0…
March 18, 2026CVE-2026-25422 affects the Popularis Extra plugin for WordPress (up to 1.2.10) with a medium severity (CVSS 4.3) CSRF vulnerability. Upgrade…
March 18, 2026CVE-2026-25411 affects the Revision Manager Tmc plugin for WordPress (up to version 2.8.22) with a medium severity CVSS score of…
March 18, 2026CVE-2026-24380 affects the Eventprime Event Calendar Management plugin (up to version 4.2.8.0) with a medium severity CVSS score of 5.3.…
March 18, 2026CVE-2025-67987 affects the Quiz Master Next plugin (up to v10.3.1) with a CVSS score of 6.5. This medium severity SQL…
