πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,383
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 26, 2026
Last Updated

40,383 vulnerabilities found (page 1102 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
fdd0694c-ea7e-4cf8-a8d8-82a2b02fecdf
< 9.8.0
MEDIUM 5.3 The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to,… wordfence
fdc8bee7-3edc-4f27-ad84-06a4a80f66a2
< 1.0.57
MEDIUM 5.3 The Timetics – Appointment Booking Calendar & Scheduling plugin for WordPress is vulnerable to unauthorized access due… wordfence
fd98b0c1-4192-45a1-adf6-e760e616d1e2 MEDIUM 5.3 The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized access due to a missing ca… wordfence
fd8997a0-f65d-4d84-a919-223664a88765
< 3.2.8
MEDIUM 5.3 The JobSearch WP Job Board plugin for WordPress is vulnerable to unauthorized access due to a missing capability check o… wordfence
fd74672c-8d41-4f3d-9989-f2f60a0c5a88 MEDIUM 5.3 The Directory Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a funct… wordfence
fd4eeb13-869d-47ba-a2d3-73886abc1e03
< 6.0.9.4
MEDIUM 5.3 The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is … wordfence
fd4714d1-3824-4436-bca0-f4eb6b11830c MEDIUM 5.3 The Koji theme for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1. This is d… wordfence
fd4446b0-3274-46c7-865a-0a168acb960f
< 1.3.11
MEDIUM 5.3 Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 th… wordfence
fd3cd605-6292-4a04-9aee-f4b9a8127e8e MEDIUM 5.3 The WordPress Console plugin for WordPress is vulnerable to unauthorized modification of data and execution of files due… wordfence
fd399ed3-03b2-477c-b38c-549d6066b6e8 MEDIUM 5.3 The RentMy Real-Time Rental Management Plugin plugin for WordPress is vulnerable to authorization bypass in all versions… wordfence
fd30fea3-c326-40b7-9b09-e62d65b33926
< 1.3.3
MEDIUM 5.3 The MAS Videos plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function… wordfence
fd21c7d3-a5f1-4c3a-b6ab-0a979f070a62
< 1.9.16
MEDIUM 5.3 The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9… wordfence
fd191128-86c8-4530-b5cf-6681899b9474
< 2.2.0
MEDIUM 5.3 The Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Prici… wordfence
fcce0a92-520d-45ac-845e-a1635f763eed
< 2.2.2
MEDIUM 5.3 The WooCommerce Product Vendors plugin for WordPress is vulnerable to unauthorized access due to a missing capability ch… wordfence
fca34e4e-3324-4942-854b-a4511f88af8b MEDIUM 5.3 The Glossary plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check o… wordfence
fc972c88-ec32-454f-a1f6-4fe04fda98cc
< 4.7.9
MEDIUM 5.3 The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to Sensitive Information Exposure i… wordfence
fc4b25b6-9596-4094-bfbb-4fd50f786a11 MEDIUM 5.3 The Product Rearrange for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capabil… wordfence
fc40196e-c0f3-4bc6-ac4b-b866902def61
< 6.2.9
MEDIUM 5.3 The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and … wordfence
fc1963cc-7e9e-4998-8338-c3e83b70d441
< 1.0.4
MEDIUM 5.3 The Consensu.io plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec… wordfence
fc167f44-4b1c-4597-9c9b-61064044bcdb
< 1.10.2
MEDIUM 5.3 The WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin for WordPress is vulnerable to … wordfence
fc0acff9-6852-4ecb-84f9-98a15dd30fc6 MEDIUM 5.3 The Upload Resume plugin for WordPress is vulnerable to captcha bypass via the form rendered by the 'resume_upload_form'… wordfence
fc0505a1-c7c4-4cf1-97cd-123a4dddcea3
< 5.1.9
MEDIUM 5.3 The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a… wordfence
fc04e676-e394-488e-a239-95af5f865613
< 3.2.2
MEDIUM 5.3 The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and incl… wordfence
fbf0302a-5997-4517-80fc-a75c256377ff
< 1.2.7
MEDIUM 5.3 The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to unauthorized access in… wordfence
fbed35ca-1630-46a4-8b1f-60cc7216f294
< 1.36.1
MEDIUM 5.3 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure… wordfence
← Prev 1099 1100 1101 1102 1103 1104 1105 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top