Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wordpress compares to other vendors in security performance

View Risk Score →

Software

wordpress
364
wordpress wordpress
93
wordpress download manager
8
wordpress church admin plugin
6
wordpress elementsready addons for elementor
4
wordpress ninja forms
4
wordpress analytify
3
wordpress arconix shortcodes
3
wordpress bear plugin
3
wordpress betheme
3
wordpress better elementor addons
3
wordpress buddyforms
3
wordpress church admin
3
wordpress contact form email
3
wordpress content blocks (custom post widget)
3
wordpress link library
3
wordpress seriously simple podcasting
3
wordpress simple shopping cart
3
wordpress survey maker
3
wordpress accept stripe payments
2
wordpress accordion slider
2
wordpress advanced custom fields pro
2
wordpress affiliate-toolkit
2
wordpress ajax contact form
2
wordpress arforms
2
wordpress auto featured image
2
wordpress auto prune posts
2
wordpress automatic plugin
2
wordpress ba book everything
2
wordpress backup & migration plugin
2
wordpress base64 encoder/decoder
2
wordpress beaver builder plugin
2
wordpress black widgets for elementor
2
wordpress blix
2
wordpress blockspare plugin
2
wordpress bookingpress
2
wordpress booster for woocommerce
2
wordpress bp email assign templates
2
wordpress bulk posts editing
2
wordpress button contact vr
2
wordpress charity addon for elementor
2
wordpress classified listing – classified ads & business directory plugin
2
wordpress clearfy cache
2
wordpress colibri page builder
2
wordpress comments extra fields for post, pages and cpt
2
wordpress comments import & export
2
wordpress community events
2
wordpress comparison slider
2
wordpress contest gallery
2
wordpress cp polls
2

WordPress Rich Showcase for Google ReviewsRich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute

Risk 39
Severity
6.4
First published (updated )
CVE-2026-15739

WordPress Participants DatabaseParticipants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameter

Risk 27
Severity
5.3
First published (updated )
CVE-2026-11354

WordPress Machete pluginWordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability

Risk 40
Severity
5.9
First published (updated )
CVE-2026-65538

WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری)WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 37
Severity
6.5
First published (updated )
CVE-2026-65536

WordPress WP Activity LogWordPress WP Activity Log plugin <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2026-65512
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Complianz pluginWordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-65498

WordPress PeproDev Ultimate InvoiceWordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability

Risk 40
Severity
6.5
First published (updated )
CVE-2026-65499

WordPress TheGemWordPress TheGem theme <= 5.11.1 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2026-65480

WordPress Ninja TablesWordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-65474

WordPress WooCommerce Product SliderWordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2026-65456
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Easy Digital DownloadsWordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability

Risk 40
Severity
6.5
First published (updated )
CVE-2026-59524

WordPress Masteriyo - LMS PluginWordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2026-59513

WordPress Broadcast Live VideoWordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-57716

WordPress Participants Database PluginWordPress Participants Database plugin <= 2.7.8.4 - Broken Access Control vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2026-27423

WordPress uListingWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2026-27392
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress DittyWordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-27355

WordPress Header Footer Script Adder – Insert Code in Header, Body & FooterHeader Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

Risk 39
Severity
6.4
First published (updated )
CVE-2026-15394

WordPress Premium Packages – Sell Digital Products Securely pluginPremium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter

Risk 46
Severity
6.3
First published (updated )
CVE-2026-15348

WordPress LpageryBulk Page Generator <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title

Risk 39
Severity
6.4
First published (updated )
CVE-2026-15404

WordPress Post Status Notifier LitePost Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter

Risk 22
Severity
4.8
EPSS
0.14%
First published (updated )
CVE-2026-9577
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Spectra Gutenberg Blocks – Website Builder for the Block EditorSpectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block

Risk 39
Severity
6.4
First published (updated )
CVE-2026-12900

WordPress KirkiKirki < 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component Library

Risk 27
Severity
5.3
First published (updated )
CVE-2026-12723

WordPress Reviews FeedReviews Feed < 2.6.5 - Unauthenticated Stored Arbitrary Shortcode Execution via Google Reviews

Risk 32
Severity
4.8
First published (updated )
CVE-2026-10724

WordPress WP Hotel BookingWP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter

Risk 38
Severity
6.1
First published (updated )
CVE-2026-15094

WordPress WooCommerce Placetopay GatewayWooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

Risk 38
Severity
6.1
First published (updated )
CVE-2026-11324
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WordPress Smart Custom FieldsSmart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title

Risk 39
Severity
6.4
First published (updated )
CVE-2026-2594

WordPress Header Footer Builder for ElementorHeader Footer Builder for Elementor < 1.2.1 - Contributor+ Stored XSS via Template Import

Risk 38
Severity
6.1
First published (updated )
CVE-2026-12869

WordPress AI EngineAI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOR

Risk 42
Severity
5.9
First published (updated )
CVE-2026-12510

WordPress WP Job PortalWP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter

Risk 38
Severity
6.5
First published (updated )
CVE-2026-12395

WordPress SEO BoosterSEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

Risk 30
Severity
4.9
First published (updated )
CVE-2026-15445
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203