πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,383
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 26, 2026
Last Updated

40,383 vulnerabilities found (page 1107 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
f507cec5-d66c-4cb0-8c35-a985aaee1283
< 4.0.5
MEDIUM 5.3 The EmbedPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check… wordfence
f4fe5ed7-17e2-4098-a51b-3b780721bf2e
< 1.5.3
MEDIUM 5.3 The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing… wordfence
f4f1467d-1f66-4e99-af44-9329cfe1efac
< 1.3
MEDIUM 5.3 The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capa… wordfence
f4e15f70-e16f-4189-9cae-61b5853428fd MEDIUM 5.3 The Accept Cryptocurrencies with Plisio plugin for WordPress is vulnerable to unauthorized access due to a missing capab… wordfence
f4dad030-41e4-4d67-8650-8d268c44d352
< 3.0.0
MEDIUM 5.3 The WP Dummy Content Generator plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing … wordfence
f4ca1736-7b99-49db-9367-586dbc14df41 MEDIUM 5.3 The WP User Control plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including … wordfence
f4b75e39-48fe-4781-be0f-9cf806d953ea
< 2.1.15
MEDIUM 5.3 The Breeze plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on … wordfence
f4887f1b-1a5d-4c29-a404-b4c31393fec2
< 4.8.4
MEDIUM 5.3 The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to AI API Key abuse in all versions up to … wordfence
f4858836-e85a-4860-a075-f8b0d2502519
< 3.0
MEDIUM 5.3 The Show Variations as Single Products Woocommerce plugin for WordPress is vulnerable to unauthorized access due to a mi… wordfence
f478ff7c-7193-4c59-a84f-c7cafff9b6c0
< 1.6.3
MEDIUM 5.3 The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and… wordfence
f46c8075-3946-406c-b4c9-ae44617207f1
< 4.3.0
MEDIUM 5.3 The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capab… wordfence
f43f69f0-6995-4789-acf3-8019227effe1 MEDIUM 5.3 The SurveyFunnel – Survey Plugin for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in… wordfence
f433c05f-d541-4e80-a99f-4f417a2738a6
< 3.14.3
MEDIUM 5.3 The Seriously Simple Podcasting plugin for WordPress is vulnerable to unauthorized access due to a missing capability ch… wordfence
f420151b-c783-49b1-b0e9-e936a904278a
< 8.3.2
MEDIUM 5.3 The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization check… wordfence
f416f1a8-0299-4e7f-9282-4edb958e7ae3 MEDIUM 5.3 The SMEPay: UPI Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capab… wordfence
f40c1c43-5e64-4b11-9fef-52501504bfe9
< 1.8.7
MEDIUM 5.3 The Makeaholic - Beauty Cosmetics WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a miss… wordfence
f3fc921f-14f2-429a-894e-953522e59747
< 2.3.7
MEDIUM 5.3 The ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema plugin for WordPress is vulnerable t… wordfence
f3ebaf25-1bd3-4770-b4bd-30de83b31add
< 3.0.32
MEDIUM 5.3 The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Arbi… wordfence
f3d00464-557f-4177-87aa-f5340b796dbb MEDIUM 5.3 The Multi Rating plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che… wordfence
f3c50b00-0b90-45f3-a392-be4e6406a865
< 3.0.4
MEDIUM 5.3 The Membership For WooCommerce – WordPress Membership Plugin, Restrict Content, Build Online Communities, Paywall & Co… wordfence
f3a8273e-2439-4138-941e-379d130e0c74
< 0.10.4
MEDIUM 5.3 The Maspik – Spam Blacklist plugin for WordPress is vulnerable to IP Filtering Bypass in all versions up to, and inclu… wordfence
f3a4fb4a-f466-4dff-8bf5-d03dd6a0b2dc
< 2.10
MEDIUM 5.3 The Share This Image plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a fu… wordfence
f36a960d-e8bd-47aa-b20a-8d91e678faba
< 1.16
MEDIUM 5.3 The Clean Login plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includ… wordfence
f34383c7-1d98-4f8a-aa43-542fe2d9a567 MEDIUM 5.3 The Starbox Voting plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.0.4… wordfence
f33e0019-e52e-464b-843d-a034e5205b2e
< 1.10.7
MEDIUM 5.3 The SureMembers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin… wordfence
← Prev 1104 1105 1106 1107 1108 1109 1110 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top