πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,383
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 26, 2026
Last Updated

40,383 vulnerabilities found (page 1134 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
c4b833c3-818d-4646-bd6d-8b3be13ea0f1
< 4.3.2
MEDIUM 5.3 The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missi… wordfence
c4b2cf3b-5d35-4ce6-9453-1538a6f7752f
< 5.0.6
MEDIUM 5.3 The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauth… wordfence
c4a1b869-42d2-4b6d-8e6a-853325e2afde
< 3.8.4.9
MEDIUM 5.3 The Pie Register plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functi… wordfence
c4901d9d-7b37-40d5-a42b-59c80bbbe8ff
< 7.87
MEDIUM 5.3 The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi… wordfence
c460e742-1008-4334-971c-999107851d62
< 2.0.9
MEDIUM 5.3 The miraculouscore plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to 2.0.9 (e… wordfence
c45aea72-2c9d-484d-8904-a1985df4b57c MEDIUM 5.3 The Yame | Link In Bio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and i… wordfence
c441d113-cc3b-4be4-9e6f-10907c682c3d
< 1.2.3
MEDIUM 5.3 The iNET Webkit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functio… wordfence
c4192a7f-b962-46f9-a524-7271ed6f4917
< 1.7.1050
MEDIUM 5.3 The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Informat… wordfence
c41651ce-ee9b-408f-a25f-113d71beb935
< 1.2.2
MEDIUM 5.3 The Secure Passkeys plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the d… wordfence
c4098a47-986c-4b2c-b27a-18ff81da0f58
< 2.1.4
MEDIUM 5.3 The All-in-one Floating Contact Form – My Sticky Elements plugin for WordPress is vulnerable to unauthorized access du… wordfence
c3f9898b-0aa0-4dd1-9298-96c853dbef5c
< 4.7.34
MEDIUM 5.3 WordPress Core is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.2 via the comme… wordfence
c3ede2bc-15a6-4194-a963-d176cb0fc612
< 4.0.2
MEDIUM 5.3 The Atarim plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on … wordfence
c3eb3444-de5c-4cb0-acaa-c6303fab46e0
< 2.12.18
MEDIUM 5.3 The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due … wordfence
c3e98eb0-3c56-46fd-839e-ff530d431e8d
< 4.0.3
MEDIUM 5.3 The Age Verification & Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access… wordfence
c3e7539c-e18f-444c-9d10-92450b6e2e03
< 3.5.4
MEDIUM 5.3 The YayPricing plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function… wordfence
c3dbae56-d28f-4d57-848d-8cf0d0c0cffc
< 2.6.8
MEDIUM 5.3 The ApplyOnline – Application Form Builder and Manager plugin for WordPress is vulnerable to unauthorized access due t… wordfence
c3db93fa-13a1-47aa-b7c2-deef1516c5e7 MEDIUM 5.3 The Flatsome theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in… wordfence
c3d7a587-042d-4ba1-9373-aaeb24c711f5
< 1.11.5
MEDIUM 5.3 The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Insecure D… wordfence
c3ca0a37-f2e3-4403-83ca-7dd2924e317d MEDIUM 5.3 The Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery plugin for WordPress is vulnerab… wordfence
c3c8cc17-2bda-413f-95dc-18c7a883ccea
< 1.2.0
MEDIUM 5.3 The Bookster – WordPress Appointment Booking Plugin plugin for WordPress is vulnerable to unauthorized data manipulati… wordfence
c3be87da-aa57-45f6-b58f-c58c92ea65a2 MEDIUM 5.3 The Bakery Autoresponder Addon plugin for WordPress is vulnerable to unauthorized access due to a missing capability che… wordfence
c39d16f1-ce80-402c-8a36-f9070dc5f9c9
< 2.8.8.9
MEDIUM 5.3 The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of prote… wordfence
c38eaab5-157c-43fa-ad67-6f063274ba69
< 1.2.17
MEDIUM 5.3 The Addonify – Quick View For WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions u… wordfence
c37bfdeb-2d0c-4ace-94cc-b85c16985994 MEDIUM 5.3 Several themes for WordPress are vulnerable to unauthorized modification of data due to a missing capability check on th… wordfence
c3717e03-9a18-48a1-97d3-1d41c7f93261
< 4.9.8
MEDIUM 5.3 The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress is vulnerable to unauthorize… wordfence
← Prev 1131 1132 1133 1134 1135 1136 1137 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top