Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-24525: CLP Varnish Cache <= 1.0.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24525 affects the CLP Varnish Cache plugin (up to 1.0.2) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-24377: Nexter Blocks <= 4.6.3 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24377 affects The Plus Addons For Block Editor plugin (up to version 4.6.3) with a CVSS score of 4.3. Authenticated…
CVE-2026-24526: Email Inquiry & Cart Options for WooCommerce <= 3.4.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24526 affects the WooCommerce Email Inquiry Cart Options plugin (up to v3.4.3) with a CVSS score of 6.4. It allows…
CVE-2026-24524: Tablesome <= 1.2.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24524 affects the Tablesome plugin for WordPress (up to version 1.2.2) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
CVE-2026-24528: Nova Blocks <= 2.1.9 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24528 affects the Nova Blocks plugin for WordPress (up to version 2.1.9) with a medium severity CVSS score of 6.4.…
CVE-2026-24532: SiteLock Security <= 5.0.2 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24532 affects the SiteLock Security plugin for WordPress (up to version 5.0.2) with a medium severity (CVSS 4.3). Patch to…
CVE-2026-24534: Booter <= 1.5.7 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24534 affects the Booter Bots Crawlers Manager plugin (up to v1.5.7) with a medium severity CVSS score of 4.3. Update…
CVE-2026-25432: Omnipress <= 1.6.7 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-25432 affects the Omnipress WordPress plugin (up to version 1.6.7) with a medium severity CVSS score of 6.4. Authenticated users…
CVE-2026-24998: Hustle <= 7.8.9.2 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24998 affects the WordPress Popup plugin (up to version 7.8.9.2) with a medium severity score of 5.3, allowing unauthenticated attackers…
CVE-2026-24536: Webpushr <= 4.38.0 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24536 affects the Webpushr Web Push Notifications plugin (up to version 4.38.0) with a medium severity CVSS score of 5.3.…
CVE-2026-25010: Share This Image <= 2.09 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-25010 affects the Share This Image plugin (up to version 2.09) with a medium severity CVSS score of 5.3. Unauthenticated…
CVE-2025-67970: Schedula <= 1.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2025-67970 affects the Schedula Smart Appointment Booking plugin for WordPress (v1.0). With a CVSS score of 5.3, it allows unauthorized…
CVE-2026-25011: Custom Admin Interface <= 7.41 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-25011 affects the WP Custom Admin Interface plugin (up to version 7.41) with a CVSS score of 4.3. Ensure you…
CVE-2026-24530: WebP Conversion <= 2.1 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24530 affects the WebP Conversion plugin for WordPress versions up to 2.1, allowing unauthorized access due to a missing capability…
CVE-2026-24543: Materialis Companion <= 1.3.52 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24543 affects the Materialis Companion plugin for WordPress (up to 1.3.52) with a medium severity (CVSS 4.3). Authenticated users can…
CVE-2026-0862: Save as PDF Plugin by PDFCrowd <= 4.5.5 Reflected Cross-Site Scripting via options PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0862 affects the Save As Pdf By Pdfcrowd plugin for WordPress (up to version 4.5.5) with a medium severity (CVSS…
CVE-2026-24996: WPElemento Importer <= 0.6.4 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24996 affects the WPElemento Importer plugin (up to v0.6.4) with a medium severity CVSS score of 4.3. Patch to v0.6.5…
CVE-2026-25012: Bannerize Pro <= 1.11.0 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-25012 affects WP Bannerize Pro versions up to 1.11.0, allowing unauthorized access to sensitive content. Upgrade to 1.11.1 to mitigate…
CVE-2026-0593: WP Go Maps (formerly WP Google Maps) <= 10.0.04 Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-0593 affects the WP Google Maps plugin versions up to 10.0.04, allowing authenticated users to modify map settings. Update to…
CVE-2026-24535: Automatic Featured Images from Videos <= 1.2.7 Missing Authorization PoC, Patch Analysis & Rule
March 18, 2026
CVE-2026-24535 affects the Automatic Featured Images From Videos plugin (up to v1.2.7) with a medium severity score of 4.3. Users…
←
1
…
97
98
99
100
101
…
120
→