CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- theme-one the gridWordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability7.1 High
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability6.5 Medium
- loopus wp cost estimation & payment forms builderWordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability7.5 High
- bdthemes ultimate post kitWordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability6.4 Medium
- dokan, inc. dokanWordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability8.8 High
- softwebmedia gyan elementsWordPress Gyan Elements plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpfactory helpdesk support ticket system for woocommerceWordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability7.5 High
- uxper goloWordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- magepeopleteam booking and rental managerWordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability6.5 Medium
- xtemos woodmartWordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability8.1 High
- wp socio telegram widget and join linkWordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- blueglass interactive ag jobs for wordpressWordPress Jobs for WordPress plugin <= 2.8 - Broken Access Control vulnerability7.5 High
- themepassion legacy adminWordPress Legacy Admin plugin <= 9.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themepassion ultra wordpress adminWordPress Ultra WordPress Admin plugin <= 11.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- g5theme handmade frameworkWordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ancorathemes wizor'sWordPress Wizor's theme <= 2.12 - Local File Inclusion vulnerability8.1 High
- ancorathemes vegadaysWordPress VegaDays theme <= 1.2.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes unicaWordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes triompherWordPress Triompher theme <= 1.1.0 - Local File Inclusion vulnerability8.1 High
- elated-themes roisinWordPress Roisin theme <= 1.2.1 - Local File Inclusion vulnerability8.1 High
- elated-themes neobeatWordPress NeoBeat theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes melodyWordPress Melody theme <= 1.6.3 - PHP Object Injection vulnerability8.1 High
- elated-themes gioiaWordPress Gioia theme <= 1.4 - Local File Inclusion vulnerability8.1 High
- ancorathemes dentaluxWordPress Dentalux theme <= 3.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes beeloveWordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability9.8 Critical
- elated-themes amoliWordPress Amoli theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes morning recordsWordPress Morning Records theme <= 1.2 - PHP Object Injection vulnerability8.1 High
- themerex prolinguaWordPress ProLingua theme <= 1.1.12 - Local File Inclusion vulnerability8.1 High
- themerex nelsonWordPress Nelson theme <= 1.2.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes mr. cobblerWordPress Mr. Cobbler theme <= 1.1.9 - Local File Inclusion vulnerability8.1 High
- axiomthemes m2 | construction and tools storeWordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability9.8 Critical
- elated-themes lellaWordPress Lella theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- elated-themes laurentWordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes hypnotherapyWordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability8.1 High
- ancorathemes greenvilleWordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability8.1 High
- themerex good homesWordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability8.1 High
- elated-themes gaspardWordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability7.1 High
- ruhul amin my album galleryWordPress My Album Gallery plugin <= 1.0.4 - Arbitrary File Deletion vulnerability6.5 Medium
- pebas lisfinity coreWordPress Lisfinity Core plugin <= 1.5.0 - SQL Injection vulnerability9.3 Critical
- webtoffee product feed for woocommerceWordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability7.2 High
- flexcubed pitchprintWordPress PitchPrint plugin <= 11.1.2 - Arbitrary File Deletion vulnerability7.5 High
- metagauss eventprimeWordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerability7.5 High
- convers lab wpsubscriptionWordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability8.6 High
- g5theme zorkaWordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cisco catalyst sd-wan managerA vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could...5.4 Medium
- cisco ios xe softwareA vulnerability in the web-based Cisco IOx application hosting environment management interface...4.8 Medium
- cisco ios xe softwareA vulnerability in the web-based Cisco IOx application hosting environment management interface...5.3 Medium
- cisco ios xe softwareA vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could...5.4 Medium
- cisco ios xe softwareA vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated...6.1 Medium
- Show moreLoading…