πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,383
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 27, 2026
Last Updated

40,383 vulnerabilities found (page 1163 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
8f83ebb2-f84f-4701-9d2b-9f7fadcb6796
< 1.3.1
MEDIUM 5.3 The Numinous theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in… wordfence
8f82ad33-8c9b-47f8-b02b-013b4112c914
< 2.3.1
MEDIUM 5.3 The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capabili… wordfence
8f8128a6-4252-4243-94ad-ca43fbe1a04e MEDIUM 5.3 The OPSI Israel Domestic Shipments plugin for WordPress is vulnerable to unauthorized access due to a missing capability… wordfence
8f706b78-2d67-442c-b7a0-7d7a0fd24b2d
< 1.1.8
MEDIUM 5.3 The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions u… wordfence
8f6bbaa1-c50f-4dad-9e5b-04bdffd4a0ae
< 6.1.9.3
MEDIUM 5.3 The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9… wordfence
8f66e25f-b67e-4227-95fe-69b40551af61
< 4.3.8
MEDIUM 5.3 The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordP… wordfence
8f5357e0-1e1b-4090-a6ae-9587c6a8d290
< 4.13.3
MEDIUM 5.3 The ProfilePress plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.13.2 via… wordfence
8f51aa9f-056a-441c-8752-edb1c7277808 MEDIUM 5.3 The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a… wordfence
8f4a2ec5-ce42-4be2-9994-9b9df532461f MEDIUM 5.3 The WeDesignTech Portfolio plugin for WordPress is vulnerable to unauthorized access due to a missing capability check o… wordfence
8f35838f-4a7d-4d25-9e5e-956411e59b62
< 2.0.0
MEDIUM 5.3 The Backup and Restore WordPress – Backup Plugin plugin for WordPress is vulnerable to unauthorized access due to a mi… wordfence
8f2333a1-b255-4219-a7b2-3de3a3e74e8c
< 5.0.18
MEDIUM 5.3 The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized access due to a missing capability ch… wordfence
8f094317-3088-4660-beae-4cf30df8528b
< 1.7.10
MEDIUM 5.3 The SiteGuard WP Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a… wordfence
8ee08aac-7bcc-4809-a5aa-7b95ed736f19
< 2.7.17
MEDIUM 5.3 The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in ve… wordfence
8edf693e-8a84-4f0c-a169-605522603fe9
< 4.2.2
MEDIUM 5.3 The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to Sensiti… wordfence
8edb72f5-dda3-4c59-ba7a-7a460cb59c03
< 3.8.9
MEDIUM 5.3 The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Se… wordfence
8eb4e5bf-d9cf-4123-8180-34b3624e86ae
< 4.9.5
MEDIUM 5.3 The Verge3D Publishing and E-Commerce plugin for WordPress is vulnerable to unauthorized access due to a missing capabil… wordfence
8ead01c4-9a87-4939-9f91-1ec3df097ebd MEDIUM 5.3 The Exzo theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in ver… wordfence
8ea7b7b5-ba3a-4d9c-9a63-ed9f645c6b1b
< 2.8.4
MEDIUM 5.3 The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a … wordfence
8e99a3e3-c5c9-400e-95ce-80d4cbe01649
< 3.5.3
MEDIUM 5.3 The webtoffee-cookie-consent plugin for WordPress is vulnerable to unauthorized access due to a missing capability check… wordfence
8e3bcea6-edca-4b2d-8b8a-99921766de23 MEDIUM 5.3 The BookPress – For Book Authors plugin for WordPress is vulnerable to unauthorized access due to a missing capability… wordfence
8e13e57e-becf-4f03-bba2-e4584c84b95c
< 4.11.54
MEDIUM 5.3 The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Sensit… wordfence
8e00a06c-9623-48e0-b212-20a2f1e7e640
< 1.1.2
MEDIUM 5.3 The Pre-Publish Checklist plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and … wordfence
8dfd77b4-0604-4724-9293-ddc71b90102f
< 2.2.5
MEDIUM 5.3 The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to Price Manipulation in versions up to, and … wordfence
8dc5404b-b2dd-496f-b56c-e4f3960e77e7
< 3.19
MEDIUM 5.3 The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a … wordfence
8db8bbc3-43ca-4ef5-a44d-2987c8597961
< 7.11.7
MEDIUM 5.3 The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11… wordfence
← Prev 1160 1161 1162 1163 1164 1165 1166 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top