Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wordpress compares to other vendors in security performance

View Risk Score →

Software

wordpress
112
wordpress wordpress
23
wordpress profilegrid
7
wordpress wplms plugin
6
wordpress download manager
5
wordpress contest gallery
4
wordpress essential blocks
4
wordpress armember plugin
3
wordpress betheme
3
wordpress calculated fields form
3
wordpress easy digital downloads
3
wordpress edwiser bridge
3
wordpress eventin
3
wordpress redirection for contact form 7
3
wordpress wpforo forum
3
wordpress academy lms plugin
2
wordpress advanced sermons
2
wordpress ai engine
2
wordpress analytify plugin
2
wordpress arforms form builder
2
wordpress arforms plugin
2
wordpress avada
2
wordpress avada builder
2
wordpress ba book everything
2
wordpress besa
2
wordpress bmi adult & kid calculator
2
wordpress booster for woocommerce
2
wordpress build app online plugin
2
wordpress clickwhale
2
wordpress community events
2
wordpress consulting
2
wordpress coupon affiliates
2
wordpress directorypress
2
wordpress download monitor
2
wordpress easy social share buttons
2
wordpress edumall theme
2
wordpress essential addons for elementor
2
wordpress eventer - wordpress event & booking manager plugin
2
wordpress eventin plugin
2
wordpress eventprime
2
wordpress file manager
2
wordpress file upload
2
wordpress forminator
2
wordpress jannah
2
wordpress jobmonster
2
wordpress js help desk
2
wordpress landing page builder
2
wordpress listingpro
2
wordpress newsletters
2
wordpress olive one click demo import
2

WordPress WowOptin: Next-Gen Popup MakerWowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection

Risk 43
Severity
7.5
First published (updated )
CVE-2026-14603

WordPress ProfilePressProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection

Risk 43
Severity
7.5
First published (updated )
CVE-2026-12497

WordPress VisualizerWordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2026-65526

WordPress Manual - Documentation, Knowledge Base & Education WordPress ThemeWordPress Manual - Documentation, Knowledge Base & Education WordPress Theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-65511

WordPress Vino themeWordPress Vino theme <= 1.9 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-65481
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Tonda Core pluginWordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-65477

WordPress MapSVGWordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2026-65451

WordPress Form Vibes – Database Manager for FormsWordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-61947

WordPress Kali FormsWordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability

Risk 44
Severity
7.7
First published (updated )
CVE-2026-59542

WordPress ApusListing themeWordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
First published (updated )
CVE-2026-57785
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Grand Photography themeWordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57769

WordPress Slider ProWordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57699

WordPress Picture Gallery pluginWordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability

Risk 48
Severity
7.1
First published (updated )
CVE-2026-57696

WordPress Funnel Kit Funnel Builder PROWordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57374

WordPress Visitor Traffic Real Time Statistics ProWordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57370
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Events ManagerEvents Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration

Risk 43
Severity
7.5
First published (updated )
CVE-2026-12987

WordPress AI EngineAI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal

Risk 60
Severity
8.1
First published (updated )
CVE-2026-12511

WordPress NewslettersNewsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field

Risk 75
Severity
8.1
First published (updated )
CVE-2026-12583

WordPress RT-Theme 18 | ExtensionsWordPress RT-Theme 18 | Extensions plugin <= 2.5 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
First published (updated )
CVE-2026-57743

WordPress WP Inventory ManagerWordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2026-57772
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress FlowWordPress Flow theme <= 1.8 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-57793

WordPress Edge-Themes Overworld overworldWordPress Overworld theme <= 1.5 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-57800

WordPress Struktur CoreWordPress Struktur Core plugin <= 2.5.1 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-57803

WordPress NewsPlus ShortcodesWordPress NewsPlus Shortcodes plugin <= 4.2.0 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )
CVE-2026-57798

WordPress ووسلام – همگام سازی ووکامرس و باسلام (sync-basalam)WordPress ووسلام – همگام سازی ووکامرس و باسلام plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 47
Severity
7.1
First published (updated )
CVE-2026-61956
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Real Estate Manager Pro PluginWordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57398

WordPress Gift Vouchers pluginWordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57415

WordPress CF7 Views – Complete Entry Management for Contact Form 7WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57411

WordPress Event TicketsWordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2026-57705

WordPress Active Products Tables for WooCommerceWordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57409
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203