CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- wbw plugins currency switcher for woocommerceWordPress WBW Currency Switcher for WooCommerce plugin <= 2.2.5 - Broken Access Control vulnerability5.3 Medium
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.50.2 - Broken Access Control vulnerability5.3 Medium
- themefusecom brizyWordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability4.3 Medium
- wpclever wpc smart wishlist for woocommerceWordPress WPC Smart Wishlist for WooCommerce plugin <= 5.0.8 - Broken Access Control vulnerability4.3 Medium
- wpclever wpc product bundles for woocommerceWordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability4.3 Medium
- xtemos woodmartWordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability5.3 Medium
- studio99 wp monitorWordPress Studio99 WP Monitor plugin <= 1.0.3 - Broken Access Control vulnerability5.3 Medium
- toocheke companionWordPress Toocheke Companion plugin <= 1.194 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ays pro image slider by aysWordPress Image Slider by Ays plugin <= 2.7.1 - Broken Access Control vulnerability5.3 Medium
- boldgrid client invoicing by sprout invoicesWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability7.2 High
- themetechmount boldmanWordPress Boldman theme <= 7.7 - Local File Inclusion vulnerability7.5 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability8.5 High
- subrata mal terawallet – for woocommerceWordPress TeraWallet – For WooCommerce plugin <= 1.5.15 - Race Condition vulnerability6.5 Medium
- ymc filter & gridsWordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability5.3 Medium
- radiustheme teamWordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability5.3 Medium
- xpro addons for beaver builder – liteWordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.6 - Broken Access Control vulnerability5.3 Medium
- publishpress capabilitiesWordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability4.3 Medium
- creatives planet greenly theme addonsWordPress Greenly Theme Addons plugin < 8.2 - Local File Inclusion vulnerability7.5 High
- creatives planet greenlyWordPress Greenly theme <= 8.1 - Local File Inclusion vulnerability7.5 High
- linethemes smartfixWordPress SmartFix theme < 1.2.4 - Broken Access Control vulnerability5.4 Medium
- linethemes nanosoftWordPress Nanosoft theme < 1.3.2 - Broken Access Control vulnerability5.4 Medium
- linethemes glbWordPress GLB theme <= 1.2.2 - Broken Access Control vulnerability5.4 Medium
- noor alam checkout for paypalWordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability5.3 Medium
- envothemes envo extraWordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability4.3 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability5.4 Medium
- magepeopleteam wpbookinglyWordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability7.5 High
- raratheme ridhiWordPress Ridhi theme <= 1.1.2 - Broken Access Control vulnerability5.3 Medium
- raratheme digital downloadWordPress Digital Download theme <= 1.1.4 - Broken Access Control vulnerability5.3 Medium
- raratheme app landing pageWordPress App Landing Page theme <= 1.2.2 - Broken Access Control vulnerability5.3 Medium
- raratheme numinousWordPress Numinous theme <= 1.3.0 - Broken Access Control vulnerability5.3 Medium
- raratheme rara academicWordPress Rara Academic theme <= 1.2.2 - Broken Access Control vulnerability5.3 Medium
- raratheme book landing pageWordPress Book Landing Page theme <= 1.2.7 - Broken Access Control vulnerability5.3 Medium
- raratheme pranayama yogaWordPress Pranayama Yoga theme <= 1.2.2 - Broken Access Control vulnerability5.3 Medium
- raratheme kalonWordPress Kalon theme <= 1.2.9 - Broken Access Control vulnerability5.3 Medium
- raratheme travel diariesWordPress Travel Diaries theme <= 1.2.4 - Broken Access Control vulnerability5.3 Medium
- raratheme the minimalWordPress The Minimal theme <= 1.2.9 - Broken Access Control vulnerability5.3 Medium
- cozy vision sms alert order notificationsWordPress SMS Alert Order Notifications plugin <= 3.9.0 - Broken Access Control vulnerability5.4 Medium
- radiustheme shopbuilder – elementor woocommerce builder addonsWordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability5.3 Medium
- raratheme elegant pinkWordPress Elegant Pink theme <= 1.3.3 - Broken Access Control vulnerability5.3 Medium
- raratheme influencerWordPress Influencer theme <= 1.1.7 - Broken Access Control vulnerability5.3 Medium
- radiustheme medilink-coreWordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability7.5 High
- delphiknight geo to latWordPress Geo to Lat plugin <= 1.0.19 - SQL Injection vulnerability8.5 High
- yannick lefebvre modal dialogWordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability9.1 Critical
- robfelty collapsing categoriesWordPress Collapsing Categories plugin <= 3.0.9 - SQL Injection vulnerability8.5 High
- robfelty collapsing archivesWordPress Collapsing Archives plugin <= 3.0.7 - SQL Injection vulnerability8.5 High
- redqteam turbo managerWordPress Turbo Manager plugin < 4.0.8 - Local File Inclusion vulnerability7.5 High
- funlus oy wplifecycleWordPress WPLifeCycle plugin <= 3.3.1 - Broken Access Control vulnerability5.3 Medium
- activity-log.com wp sessions time monitoring full automaticWordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability5.3 Medium
- marketing fire editorial calendarWordPress Editorial Calendar plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- richplugins rich showcase for google reviewsWordPress Rich Showcase for Google Reviews plugin <= 6.9.4.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- Show moreLoading…