Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-1310: Simple calendar for Elementor <= 1.6.6 Missing Authorization to Unauthenticated Arbitrary Calendar Entry Deletion PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1310 affects the Simple Calendar For Elementor plugin (up to v1.6.6) with a CVSS score of 5.3. Unauthenticated attackers can…
CVE-2026-0746: AI Engine <= 3.3.2 Authenticated (Subscriber+) Server-Side Request Forgery PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0746 affects the Ai Engine plugin for WordPress (up to v3.3.2) with a medium severity (CVSS 6.4) SSRF vulnerability. Update…
CVE-2025-67973: Sunshine Photo Cart <= 3.5.6.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67973 affects the Sunshine Photo Cart plugin (up to v3.5.6.2) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access.…
CVE-2025-14865: Passster – Password Protect Pages and Content <= 4.2.24 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14865 affects the Content Protector plugin for WordPress (up to version 4.2.24) with a medium severity CVSS score of 6.4.…
CVE-2026-1298: Easy Replace Image <= 3.5.2 Missing Authorization to Authenticated (Contributor+) Arbitrary Attachment Replacement PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1298 affects the Easy Replace Image plugin (up to 3.5.2) with a medium severity CVSS of 5.3. Authenticated users can…
CVE-2025-8072: Target Video Easy Publish <= 3.8.8 Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-8072 affects the Brid Video Easy Publish plugin (up to v3.8.8) with a medium severity CVSS score of 6.4. Authenticated…
CVE-2026-1244: Forms Bridge <= 4.2.5 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1244 affects the Forms Bridge plugin (up to 4.2.5) with a medium severity (CVSS 6.4) Stored XSS vulnerability. Update to…
CVE-2026-1083: Appointment Hour Booking – Booking Calendar <= 1.5.60 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1083 affects the Appointment Hour Booking plugin (up to v1.5.60) with a medium severity CVSS score of 4.4. Admins should…
CVE-2025-9082: WPBITS Addons For Elementor <= 1.8 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-9082 affects the WPBITS Addons For Elementor plugin (up to v1.8) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
CVE-2026-0825: Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0825 affects the Contact Form Entries plugin (up to v1.4.5) with a medium severity (CVSS 5.3) authentication bypass, allowing unauthenticated…
CVE-2025-69323: Slimstat Analytics <= 5.3.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69323 affects the Slimstat Analytics plugin for WordPress (up to version 5.3.2) with a medium severity CVSS score of 6.1…
CVE-2025-14795: Stop Spammers Classic <= 2026.1 Cross-Site Request Forgery via Email Allowlist PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14795 affects the Stop Spammer Registrations Plugin, with a CVSS score of 4.3. It allows unauthenticated attackers to exploit CSRF…
CVE-2025-68021: ConveyThis <= 269.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68021 affects the ConveyThis Translate plugin for WordPress (up to version 269.1) with a medium severity CVSS score of 5.3.…
CVE-2025-68069: Directorist <= 8.5.8 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68069 affects the Directorist plugin (up to 8.5.8) with a medium severity CVSS score of 4.3. Authenticated attackers can exploit…
CVE-2025-68048: NextMove Lite <= 2.23.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68048 affects Woo Thank You Page Nextmove Lite (up to v2.23.0) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
CVE-2025-68845: eDS Responsive Menu <= 1.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68845 affects the Eds Responsive Menu plugin for WordPress (up to version 1.2) with a CVSS score of 6.1. It…
CVE-2025-68880: Simple Archive Generator <= 5.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68880 affects the Simple Archive Generator plugin for WordPress (up to version 5.2) with a medium severity CVSS score of…
CVE-2025-67974: WPLegalPages <= 3.5.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67974 affects WP Legal Pages plugin versions up to 3.5.4, allowing unauthorized access due to a missing capability check. Upgrade…
CVE-2025-69297: Aardvark <= 2.19 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-69297 affects the Aardvark Plugin (up to version 2.19) with a medium severity CVSS score of 5.3. Unauthenticated attackers can…
CVE-2025-67975: aDirectory <= 3.0.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67975 affects the aDirectory plugin (up to v3.0.3) with a CVSS score of 4.3. This medium severity vulnerability allows authenticated…
←
1
…
95
96
97
98
99
…
120
→