Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2025-68880: Simple Archive Generator <= 5.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68880 affects the Simple Archive Generator plugin for WordPress (up to version 5.2) with a medium severity CVSS score of…
CVE-2025-67974: WPLegalPages <= 3.5.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67974 affects WP Legal Pages plugin versions up to 3.5.4, allowing unauthorized access due to a missing capability check. Upgrade…
CVE-2025-68847: iSape <= 0.72 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68847 affects the iSape plugin for WordPress (up to version 0.72) with a medium severity CVSS score of 6.1. Users…
CVE-2025-68856: Mopinion Feedback Form <= 1.1.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68856 affects the Mopinion Feedback Form plugin for WordPress (up to v1.1.1) with a medium severity CVSS score of 6.1.…
CVE-2025-68843: FeedWordPress Advanced Filters <= 0.6.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68843 affects the FeedWordPress Advanced Filters plugin (up to version 0.6.2) with a medium severity CVSS score of 6.1. Ensure…
CVE-2025-68855: JobBoard Job listing <= 1.2.8 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68855 affects the Job Board Light plugin (up to v1.2.8) with a medium severity score of 5.3. Unauthenticated attackers can…
CVE-2026-1060: WP Adminify <= 4.0.7.7 Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1060 affects the Adminify plugin for WordPress, exposing sensitive information via an insecure REST API endpoint. Upgrade to version 4.0.7.8…
CVE-2025-67977: HAPPY <= 1.0.8 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67977 affects the Happy Helpdesk Support Ticket System plugin (v1.0.8) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
CVE-2025-68895: AhaChat Messenger Marketing <= 1.1 Authentication Bypass PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68895 affects the AhaChat Messenger Marketing plugin for WordPress (up to v1.1) with a medium severity (CVSS 5.3) authentication bypass…
CVE-2025-14971: Link Invoice Payment for WooCommerce <= 2.8.0 Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14971 affects the Invoice Payment For WooCommerce plugin (up to v2.8.0) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
CVE-2025-68846: Asynchronous Javascript <= 1.3.5 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68846 affects the Asynchronous Javascript plugin for WordPress (up to version 1.3.5) with a medium severity CVSS of 6.1. Users…
CVE-2025-68050: Leadpages <= 1.1.3 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68050 affects the Leadpages plugin for WordPress (up to version 1.1.3) with a medium severity score of 5.3. Ensure to…
CVE-2025-68031: افزونه پیامک حرفه ای فراز اس ام اس <= 2.7.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-68031 affects the Farazsms plugin for WordPress (up to version 2.7.3) with a CVSS score of 6.1. Users should patch…
CVE-2026-1295: Buy Now Plus <= 1.0.2 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-1295 affects the Buy Now Plus plugin (up to v1.0.2) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
CVE-2025-14039: Simple Folio <= 1.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-14039 affects the Simple Folio plugin for WordPress (up to 1.1.1) with a medium severity CVSS of 6.4. Authenticated attackers…
CVE-2026-24522: Subscribe <= 1.2.16 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24522 affects the Wp Subscribe plugin (versions
CVE-2026-24389: Gallery PhotoBlocks <= 1.3.2 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24389 affects the Photoblocks Grid Gallery plugin (up to v1.3.2) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
CVE-2026-24523: FullCalendar <= 1.6 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24523 affects the WP FullCalendar plugin (up to v1.6) with a CVSS score of 5.3. Unauthenticated attackers can access sensitive…
CVE-2026-24998: Hustle <= 7.8.9.2 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24998 affects the WordPress Popup plugin (up to version 7.8.9.2) with a medium severity score of 5.3, allowing unauthenticated attackers…
CVE-2026-24536: Webpushr <= 4.38.0 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24536 affects the Webpushr Web Push Notifications plugin (up to version 4.38.0) with a medium severity CVSS score of 5.3.…
←
1
…
96
97
98
99
100
…
120
→