Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wordpress compares to other vendors in security performance

View Risk Score →

Software

wordpress
36
wordpress wordpress
8
wordpress wplms plugin
8
wordpress elementor
3
wordpress file upload
3
wordpress ninja forms
3
wordpress unlimited elements for elementor
3
wordpress wp pipes
3
wordpress xstore core
3
wordpress ai engine plugin
2
wordpress automatic
2
wordpress build app online plugin
2
wordpress church admin plugin
2
wordpress contact form 7
2
wordpress core
2
wordpress crm perks forms
2
wordpress defender security
2
wordpress eventin
2
wordpress front end users
2
wordpress instawp connect
2
wordpress js help desk
2
wordpress js help desk plugin
2
wordpress js job manager plugin
2
wordpress makeaholic theme
2
wordpress moveto plugin
2
wordpress participants database
2
wordpress podlove podcast publisher
2
wordpress popup by supsystic
2
wordpress realhomes
2
wordpress s2member plugin
2
wordpress sms alert order notifications – woocommerce
2
wordpress sunshine photo cart
2
wordpress wechat social login plugin
2
wordpress woffice
2
wordpress woocommerce pdf vouchers
2
wordpress wp job portal
2
wordpress wp mailster
2
wordpress wpforms
2
wordpress activecampaign plugin
1
wordpress activedemand plugin
1
wordpress activity link preview for buddypress
1
wordpress addons & fields for woocommerce
1
wordpress adirectory
1
wordpress advanced 301 and 302 redirect
1
wordpress advanced custom fields
1
wordpress advanced custom fields pro
1
wordpress advanced file manager
1
wordpress advanced linked variations for woocommerce
1
wordpress advanced settings plugin
1
wordpress affiliate links: wordpress plugin for link cloaking and link management
1

WordPress Project Management, Bug and Issue Tracking PluginSoftware Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter

Risk 66
Severity
9.1
First published (updated )
CVE-2026-12877

WordPress Avada CoreWordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability

Risk 80
Severity
9.6
First published (updated )
CVE-2026-65471

WordPress TrueBooker pluginWordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-61951

WordPress BooklyWordPress Bookly plugin <= 27.7 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-61949

WordPress Participants DatabaseWordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-59525
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Mailster pluginWordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability

Risk 72
Severity
9.1
First published (updated )
CVE-2026-27064

WordPress KirkiKirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis

Risk 66
Severity
9.1
First published (updated )
CVE-2026-13147

WordPress WordPressWordPress Core Interpretation Conflict Vulnerability

Risk 99
Severity
9.8
Exploited
Trending
3 Months
First published (updated )
CVE-2026-63030

WordPress WordPressWordPress Core SQL Injection Vulnerability

Risk 76
Severity
9.1
Exploited
Trending
Month
First published (updated )
CVE-2026-60137

WordPress Word Count and Social SharesWord Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

Risk 68
Severity
9.6
First published (updated )
CVE-2026-11563
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress RT-Theme 18 | ExtensionsWordPress RT-Theme 18 | Extensions plugin <= 2.5 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-57744

WordPress DirectoristWordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-59518

WordPress Simple Business Directory ProWordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-57707

WordPress AmeliaWordPress Amelia plugin <= 2.4.2 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-57702

WordPress User Registration & MembershipUser Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership Activation

Risk 66
Severity
9.1
First published (updated )
CVE-2026-11964
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Printcart Web to Print Product Designer for WooCommercePrintcart Web to Print Product Designer for WooCommerce <= 2.5.2 - Unauthenticated Arbitrary File Deletion

Risk 47
Severity
9.1
EPSS
0.74%
First published (updated )
CVE-2026-9725

WordPress GeekyBot pluginWordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-57679

WordPress BookticsWordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-57621

WordPress Five Star Business Profile and SchemaWordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

Risk 72
Severity
9.1
First published (updated )
CVE-2026-27436

WordPress PrivateContentWordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-57692
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress EventON - WordPress Virtual Event Calendar PluginEventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter

Risk 61
Severity
9.8
EPSS
0.30%
First published (updated )
CVE-2026-9711

WordPress 결제 심플페이WordPress 워드프레스 결제 심플페이 plugin <= 5.5.6 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )
CVE-2026-56036

Daan.Dev OMGF ProWordPress OMGF Pro plugin <= 5.2.6 - Arbitrary File Upload vulnerability

Risk 87
Severity
10
First published (updated )
CVE-2026-57700

WordPress Widget Options PluginWordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability

Risk 82
Severity
9.9
First published (updated )
CVE-2026-54823

WordPress ModernoWordPress Moderno theme < 1.43 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-49108
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress PlumbingWordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2025-69127

WordPress AI Lab (WordPress theme)WordPress AI Lab theme < 5.4.2 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-42380

WordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any SiteWordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Upload vulnerability

Risk 87
Severity
10
First published (updated )
CVE-2025-69129

WordPress Nifty themeWordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-27429

WordPress FastDupWordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability

Risk 80
Severity
9.6
First published (updated )
CVE-2026-52703
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203