πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,383
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 26, 2026
Last Updated

40,383 vulnerabilities found (page 1105 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
f7e5bcb2-2152-4b55-b2f9-9e8e53ddd790
< 1.0.14
MEDIUM 5.3 The Legal Text Connector of the IT-Recht Kanzlei plugin for WordPress is vulnerable to unauthorized access due to a miss… wordfence
f7df2f38-4831-4cd4-b8ff-27c471775cae
< 1.14.3
MEDIUM 5.3 The weMail plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on … wordfence
f7dbf179-7099-4dfb-8dad-780f996a7005
< 6.1.8
MEDIUM 5.3 The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vul… wordfence
f7d7c619-7dc0-47a5-a203-6df4dfa0158b
< 2.3.9
MEDIUM 5.3 The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to… wordfence
f7c654d4-7067-4188-93c0-ece654f8d986
< 3.9.1
MEDIUM 5.3 The SALESmanago & Leadoo plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on … wordfence
f7b25126-9db4-488a-aa47-2f903b0b9fdf
< 7.11.11
MEDIUM 5.3 The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to unauthorized access due to … wordfence
f7adeee0-30ff-4759-b42e-1ac2dea5a8a4
< 4.4.3
MEDIUM 5.3 The MW WP Form plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.4.2 via the… wordfence
f77e04c0-4674-409d-8966-53dfdb5b3ab3 MEDIUM 5.3 The Flights & Hotels Booking WP Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capabi… wordfence
f74d2236-90aa-4c5f-b427-420649cdc387 MEDIUM 5.3 The Local Magic plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functio… wordfence
f74a2cc2-7e92-493a-a245-8b8c67b92059 MEDIUM 5.3 The WordPress Single Sign-On (SSO) - Multisite Enterprise plugin for WordPress is vulnerable to unauthorized access due … wordfence
f743d15a-a283-4138-9a12-7cf4dd235431
< 2.0
MEDIUM 5.3 The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers t… wordfence
f72de600-b9d8-4d91-9c80-f2df2a2ef435 MEDIUM 5.3 The onepagewebsite Theme for WordPress is vulnerable to Sensitive Data Exposure in all versions via the index.php file. … wordfence
f72a8b6b-2eef-4245-b215-5ae6fa31e650
< 4.7.10
MEDIUM 5.3 The WP ULike – All-in-One Engagement Toolkit plugin for WordPress is vulnerable to content spoofing due to a missing c… wordfence
f7299fa0-7e5d-484e-a5a1-0ffed18ecfd9 MEDIUM 5.3 The EfΓ­ Bank plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,… wordfence
f71e60b9-68e9-408a-8047-7f74b7fb72b2
< 1.1.4
MEDIUM 5.3 The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not p… wordfence
f71ab7bb-886a-4661-92b5-d9ac52901494
< 1.6.4
MEDIUM 5.3 The Download Monitor plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.6… wordfence
f719a2de-edb1-460e-8efd-fc2ca7fa5245
< 2.8.6
MEDIUM 5.3 The ShopLentor Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a func… wordfence
f70ee339-d9d4-43ad-8605-6a5533783718
< 3.3.9
MEDIUM 5.3 The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Sensitive… wordfence
f70e1d20-2f8c-40ce-9c2f-74a07cd18f52
< 1.2.7
MEDIUM 5.3 The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Sensitive Information … wordfence
f708e910-7745-4ff5-9f9f-5552dbaf1113
< 1.6
MEDIUM 5.3 The Elementor Contact Form DB plugin for WordPress is vulnerable to sensitive information disclosure due to a lack of ca… wordfence
f6e5dde2-f9f9-4a64-9174-e5e6e9fe1b23
< 1.2.3
MEDIUM 5.3 The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauth… wordfence
f6b302c9-a6b9-4a91-acb5-2ad270817606
< 2.1.8
MEDIUM 5.3 The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a mis… wordfence
f693b48b-9b16-44cc-aded-ded979a3541c
< 1.4.81
MEDIUM 5.3 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Insecure Direct Object … wordfence
f67684cd-3e0f-48bb-967a-16ea2b027843
< 2.6
MEDIUM 5.3 The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information … wordfence
f6515d70-438b-47b7-a3c4-5b8dc401a40e
< 6.0.7.7
MEDIUM 5.3 The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is … wordfence
← Prev 1102 1103 1104 1105 1106 1107 1108 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top