{"items":[{"id":"CVE-2025-28859","published":"2025-03-11T21:00:31.578Z","updated":"2026-04-28T16:11:49.187Z","title":"WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodeVibrant","product":"Maintenance Notice","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2024-5503","published":"2024-06-21T02:05:41.867Z","updated":"2026-04-08T16:52:42.198Z","title":"WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion","severity":"HIGH","score":8.8,"vendor":"codevibrant","product":"WP Blog Post Layouts","kev":false,"epss":0.00822,"kevAdded":null},{"id":"CVE-2024-5574","published":"2024-06-19T05:37:43.474Z","updated":"2026-04-08T16:34:45.867Z","title":"WP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion","severity":"HIGH","score":7.5,"vendor":"codevibrant","product":"WP Magazine Modules Lite","kev":false,"epss":0.00758,"kevAdded":null}]}