9.9

CVSS3.1

CVE-2026-25345 - WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability

Improper Validation of Specified Quantity in Input vulnerability in GalleryCreator SimpLy Gallery simply-gallery-block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects SimpLy Gallery: from n/a through <= 3.3.2.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

6.5

CVSS3.1

CVE-2026-25344 - WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through <= 2.2.6.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

7.1

CVSS3.1

CVE-2026-25342 - WordPress Boutique theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through < 2.4.6.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

7.1

CVSS3.1

CVE-2026-25341 - WordPress RSFirewall! plugin <= 1.1.45 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored XSS.This issue affects RSFirewall!: from n/a through <= 1.1.45.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

9.3

CVSS3.1

CVE-2026-25340 - WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NooTheme Jobmonster noo-jobmonster allows Blind SQL Injection.This issue affects Jobmonster: from n/a through < 4.8.4.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

6.5

CVSS3.1

CVE-2026-25339 - WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Retrieve Embedded Sensitive Data.This issue affects Contact Form by WPForms: from n/a through <= 1.9.8.7.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

8.1

CVSS3.1

CVE-2026-25334 - WordPress Salon Booking System Pro plugin < 10.30.12 - Account Takeover vulnerability

Incorrect Privilege Assignment vulnerability in wordpresschef Salon Booking System Pro salon-booking-plugin-pro allows Privilege Escalation.This issue affects Salon Booking System Pro: from n/a through < 10.30.12.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

6.8

CVSS3.1

CVE-2026-25328 - WordPress Product File Upload for WooCommerce plugin <= 2.2.4 - Arbitrary File Deletion vulnerabili…

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Product File Upload for WooCommerce products-file-upload-for-woocommerce allows Path Traversal.This issue affects Product File Upload for WooCommerce: from n/a through <= 2.2.4.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

6.5

CVSS3.1

CVE-2026-25327 - WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through <= 2.7.9.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.

7.5

CVSS3.1

CVE-2026-25317 - WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vu…

Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.9.0.

πŸ“… Published: March 25, 2026, 4:14 p.m. πŸ”„ Last Modified: March 30, 2026, 1:27 p.m.
Total resulsts: 342025
Page 183 of 34,203
Β« previous page Β» next page
Filters