Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wordpress compares to other vendors in security performance

View Risk Score →

Software

wordpress
545
wordpress wordpress
131
wordpress download manager
14
wordpress wplms plugin
14
wordpress newsletters
9
wordpress file upload
8
wordpress profilegrid
8
wordpress ninja forms
7
wordpress wp mailster
7
wordpress church admin plugin
6
wordpress essential addons for elementor
6
wordpress link library
6
wordpress salon booking system plugin
6
wordpress wp job portal
6
wordpress contest gallery
5
wordpress eventin
5
wordpress seriously simple podcasting
5
wordpress simple shopping cart
5
wordpress sunshine photo cart
5
wordpress academy lms plugin
4
wordpress advanced custom fields pro
4
wordpress ai engine
4
wordpress ai engine plugin
4
wordpress armember plugin
4
wordpress betheme
4
wordpress build app online plugin
4
wordpress community events
4
wordpress easy digital downloads
4
wordpress elementor
4
wordpress elementsready addons for elementor
4
wordpress essential blocks
4
wordpress exclusive addons for elementor
4
wordpress file manager
4
wordpress js help desk plugin
4
wordpress simple membership
4
wordpress simple paypal shopping cart
4
wordpress the pack elementor addons
4
wordpress wp compress
4
wordpress wp gotowebinar
4
wordpress wpforms
4
wordpress xstore core
4
wordpress admin and site enhancements (ase)
3
wordpress affiliate-toolkit
3
wordpress analytify
3
wordpress arconix shortcodes
3
wordpress arforms
3
wordpress contact form email
3
wordpress js help desk
3
wordpress js job manager plugin
3
wordpress listingpro
3

WordPress Rich Showcase for Google ReviewsRich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute

Risk 39
Severity
6.4
First published (updated )
CVE-2026-15739

WordPress WowOptin: Next-Gen Popup MakerWowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection

Risk 43
Severity
7.5
First published (updated )
CVE-2026-14603

WordPress Project Management, Bug and Issue Tracking PluginSoftware Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter

Risk 66
Severity
9.1
First published (updated )
CVE-2026-12877

WordPress ProfilePressProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection

Risk 43
Severity
7.5
First published (updated )
CVE-2026-12497

WordPress Participants DatabaseParticipants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameter

Risk 27
Severity
5.3
First published (updated )
CVE-2026-11354
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Machete pluginWordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability

Risk 40
Severity
5.9
First published (updated )
CVE-2026-65538

WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری)WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 37
Severity
6.5
First published (updated )
CVE-2026-65536

WordPress VisualizerWordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2026-65526

WordPress WP Activity LogWordPress WP Activity Log plugin <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2026-65512

WordPress Manual - Documentation, Knowledge Base & Education WordPress ThemeWordPress Manual - Documentation, Knowledge Base & Education WordPress Theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-65511
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Complianz pluginWordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-65498

WordPress PeproDev Ultimate InvoiceWordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability

Risk 40
Severity
6.5
First published (updated )
CVE-2026-65499

WordPress Vino themeWordPress Vino theme <= 1.9 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-65481

WordPress TheGemWordPress TheGem theme <= 5.11.1 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2026-65480

WordPress Tonda Core pluginWordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-65477
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Ninja TablesWordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-65474

WordPress Avada CoreWordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability

Risk 80
Severity
9.6
First published (updated )
CVE-2026-65471

WordPress WooCommerce Product SliderWordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2026-65456

WordPress MapSVGWordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2026-65451

WordPress TrueBooker pluginWordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-61951
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress BooklyWordPress Bookly plugin <= 27.7 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-61949

WordPress Form Vibes – Database Manager for FormsWordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-61947

WordPress Kali FormsWordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability

Risk 44
Severity
7.7
First published (updated )
CVE-2026-59542

WordPress Participants DatabaseWordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-59525

WordPress Easy Digital DownloadsWordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability

Risk 40
Severity
6.5
First published (updated )
CVE-2026-59524
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Masteriyo - LMS PluginWordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2026-59513

WordPress ApusListing themeWordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
First published (updated )
CVE-2026-57785

WordPress Grand Photography themeWordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57769

WordPress Broadcast Live VideoWordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-57716

WordPress Slider ProWordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57699
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203