Skip to content
OpenAdvisories

Archive

13 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /13 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

186 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-32375

    WordPress Travel Diaries theme <= 1.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Diaries: from n/a through <= 1.2.4.

    Rara Theme Travel Diaries
  • Medium 5.3
    CVE-2026-32376

    WordPress Kalon theme <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kalon: from n/a through <= 1.2.9.

    Rara Theme Kalon
  • Medium 5.3
    CVE-2026-32377

    WordPress Pranayama Yoga theme <= 1.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pranayama Yoga: from n/a through <= 1.2.2.

    Rara Theme Pranayama Yoga
  • Medium 5.3
    CVE-2026-32374

    WordPress The Minimal theme <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Minimal: from n/a through <= 1.2.9.

    Rara Theme The Minimal
  • Medium 5.3
    CVE-2026-32370

    WordPress Influencer theme <= 1.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Influencer: from n/a through <= 1.1.7.

    Rara Theme Influencer
  • Medium 5.3
    CVE-2026-32372

    WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommer…

    RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons Web / CMS
  • Medium 5.3
    CVE-2026-32371

    WordPress Elegant Pink theme <= 1.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elegant Pink: from n/a through <= 1.3.3.

    Rara Theme Elegant Pink
  • Medium 5.3
    CVE-2026-32363

    WordPress WPLifeCycle plugin <= 3.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Funlus Oy WPLifeCycle free-php-version-info allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLifeCycle: from n/a through <= 3.3.1.

    Funlus Oy WPLifeCycle
  • Medium 5.3
    CVE-2026-32362

    WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a thr…

    activity-log.com WP Sessions Time Monitoring Full Automatic
  • Medium 5.9
    CVE-2026-32360

    WordPress Rich Showcase for Google Reviews plugin <= 6.9.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richplugins Rich Showcase for Google Reviews widget-google-reviews allows Stored XSS.This issue affects Rich Showcase for Google Reviews: from n/a through <=…

    richplugins Rich Showcase for Google Reviews
  • Medium 6.5
    CVE-2026-32359

    WordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Icon List Block icon-list-block allows Stored XSS.This issue affects Icon List Block: from n/a through <= 1.2.3.

    bPlugins Icon List Block
  • Medium 6.5
    CVE-2026-32361

    WordPress Editorial Calendar plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marketing Fire Editorial Calendar editorial-calendar allows DOM-Based XSS.This issue affects Editorial Calendar: from n/a through <= 3.9.0.

    Marketing Fire Editorial Calendar
  • Medium 6.4
    CVE-2026-32357

    WordPress Simple Blog Card plugin <= 2.37 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Katsushi Kawamori Simple Blog Card simple-blog-card allows Server Side Request Forgery.This issue affects Simple Blog Card: from n/a through <= 2.37.

    katsushi-kawamori Simple Blog Card
  • Medium 6.5
    CVE-2026-32356

    WordPress Robo Gallery plugin <= 5.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robosoft Robo Gallery robo-gallery allows DOM-Based XSS.This issue affects Robo Gallery: from n/a through <= 5.1.2.

    Robosoft Robo Gallery
  • Medium 5.3
    CVE-2026-32354

    WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through < 5.1.9.

    MagePeople Team WpEvently
  • Medium 6.4
    CVE-2026-32353

    WordPress MailerPress plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in MailerPress Team MailerPress mailerpress allows Server Side Request Forgery.This issue affects MailerPress: from n/a through <= 1.4.2.

    MailerPress Team MailerPress
  • Medium 6.5
    CVE-2026-32352

    WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows DOM-Based XSS.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.

    Elementor Elementor Website Builder
  • Medium 5.9
    CVE-2026-32351

    WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through <= 11.15.13.

    blubrry PowerPress Podcasting
  • Medium 5.3
    CVE-2026-32350

    WordPress Chocolate House theme <= 1.1.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpradiant Chocolate House chocolate-house allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chocolate House: from n/a through <= 1.1.5.

    wpradiant Chocolate House
  • Medium 5.3
    CVE-2026-32346

    WordPress Travel Agency theme <= 1.5.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through <= 1.5.5.

    Rara Theme Travel Agency
  • Medium 5.3
    CVE-2026-32347

    WordPress Restaurant and Cafe theme <= 1.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Restaurant and Cafe restaurant-and-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant and Cafe: from n/a through <= 1.2.5.

    Rara Theme Restaurant and Cafe
  • Medium 5.3
    CVE-2026-32348

    WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MadrasThemes MAS Videos masvideos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAS Videos: from n/a through <= 1.3.2.

    MadrasThemes MAS Videos
  • Medium 4.9
    CVE-2026-32349

    WordPress Embed PDF Viewer plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer allows Server Side Request Forgery.This issue affects Embed PDF Viewer: from n/a through <= 2.4.7.

    Andy Fragen Embed PDF Viewer
  • Medium 4.3
    CVE-2026-32343

    WordPress Easy Table of Contents plugin <= 2.0.80 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Easy Table of Contents easy-table-of-contents allows Cross Site Request Forgery.This issue affects Easy Table of Contents: from n/a through <= 2.0.80.

    Magazine3 Easy Table of Contents
  • Medium 5.3
    CVE-2026-32341

    WordPress Benevolent theme <= 1.3.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Benevolent benevolent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Benevolent: from n/a through <= 1.3.9.

    Rara Theme Benevolent
  • Medium 5.3
    CVE-2026-32345

    WordPress Perfect Portfolio theme <= 1.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Perfect Portfolio: from n/a through <= 1.2.4.

    Rara Theme Perfect Portfolio
  • Medium 4.3
    CVE-2026-32344

    WordPress Corpiva theme <= 1.0.96 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in desertthemes Corpiva corpiva allows Cross Site Request Forgery.This issue affects Corpiva: from n/a through <= 1.0.96.

    desertthemes Corpiva
  • Medium 4.3
    CVE-2026-32342

    WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.1.2.

    Ays Pro Quiz Maker
  • Medium 5.3
    CVE-2026-32340

    WordPress Business One Page theme <= 1.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through <= 1.3.2.

    Rara Theme Business One Page
  • Medium 5.3
    CVE-2026-32339

    WordPress Bakes And Cakes theme <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes And Cakes: from n/a through <= 1.2.9.

    Rara Theme Bakes And Cakes
  • Medium 5.3
    CVE-2026-32335

    WordPress The Conference theme <= 1.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Conference: from n/a through <= 1.2.5.

    Rara Theme The Conference
  • Medium 5.3
    CVE-2026-32338

    WordPress Construction Landing Page theme <= 1.4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Construction Landing Page: from n/a through <= 1.4.1.

    Rara Theme Construction Landing Page
  • Medium 5.3
    CVE-2026-32336

    WordPress Rara Business theme <= 1.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara Business: from n/a through <= 1.3.0.

    Rara Theme Rara Business
  • Medium 5.3
    CVE-2026-32337

    WordPress Preschool and Kindergarten theme <= 1.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.5.

    Rara Theme Preschool and Kindergarten
  • Medium 5.4
    CVE-2026-32331

    WordPress Textmetrics plugin <= 3.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textmetrics: from n/a through <= 3.6.4.

    Israpil Textmetrics
  • Medium 4.3
    CVE-2026-32330

    WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site Request Forgery.This issue affects Photo Gallery by 10Web: from n/a through <= 1.8.37.

    10web Photo Gallery by 10Web
  • Medium 5.3
    CVE-2026-32334

    WordPress JobScout theme <= 1.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobScout: from n/a through <= 1.1.7.

    Rara Theme JobScout
  • Medium 5.3
    CVE-2026-32332

    WordPress Easy Form plugin <= 2.7.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through <= 2.7.9.

    Ays Pro Easy Form
  • Medium 5.4
    CVE-2026-32328

    WordPress Lemmony theme < 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in shufflehound Lemmony lemmony allows Cross Site Request Forgery.This issue affects Lemmony: from n/a through < 1.7.1.

    shufflehound Lemmony
  • Medium 5.3
    CVE-2026-32329

    WordPress Advanced Related Posts plugin <= 1.9.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Related Posts: from n/a through <= 1.9.1.

    Ays Pro Advanced Related Posts