Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.
40,383 vulnerabilities found (page 1186 of 1616)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| 61f7e01e-c9ce-47f6-96d0-de908ce7e90c | < 2.4.2 |
MEDIUM | 5.3 | The WP Ultimate Exporter plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and inc… | — | wordfence |
| 61ee1857-aa85-4d37-a347-a1f59c95cbff | < 0.0.9 |
MEDIUM | 5.3 | The Demi β One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory… | — | wordfence |
| 61d63c5a-6ca6-42d8-ab0a-152d9c95945c | < 1.7.07 |
MEDIUM | 5.3 | The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 Th… | — | wordfence |
| 61d18897-8ebd-454b-9642-7f43a0603490 | < 2.2.0 |
MEDIUM | 5.3 | The Easy Dropbox Integration plugin for WordPress is vulnerable to unauthorized access due to a missing capability check… | — | wordfence |
| 61ca5ab6-5fe9-4313-9b0d-8736663d0e89 | < 4.10.2 |
MEDIUM | 5.3 | The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ… | — | wordfence |
| 61bbf0a0-7ba7-450c-9270-1000a8f46eca | < 6.4.0 |
MEDIUM | 5.3 | The Gutenberg Essential Blocks β Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Se… | — | wordfence |
| 61a9ad18-28d4-488c-b3a7-e35745f9c83e | < 7.0 |
MEDIUM | 5.3 | The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-ex… | — | wordfence |
| 6197c194-5a17-41da-be79-58a6f5c68a0b | < 3.4.4 |
MEDIUM | 5.3 | The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all version… | — | wordfence |
| 6193139b-52bf-425c-b1d3-c6fbd9185f06 | < 4.4.7 |
MEDIUM | 5.3 | The User Registration & Membership β Custom Registration Form Builder, Custom Login Form, User Profile, Content Restri… | — | wordfence |
| 616de170-6645-4a06-a393-51bec1d8bd8c | < 5.0.0 |
MEDIUM | 5.3 | The MW WP Form plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in versions u… | — | wordfence |
| 61585a02-fe7b-4a54-959f-346e4e0d6658 | < 1.2.8 |
MEDIUM | 5.3 | The Featured Post Creative plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa… | — | wordfence |
| 6153489c-9e18-4446-8bd8-47745eb56cdf | < 3.2.8 |
MEDIUM | 5.3 | The RestroPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functio… | — | wordfence |
| 6147582f-578a-47ad-b16c-65c37896783d | < 32.0.10 |
MEDIUM | 5.3 | Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data … | — | wordfence |
| 613e496b-9770-4c7c-adfd-956542816a0a | MEDIUM | 5.3 | The Hotel Listing plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a funct… | — | wordfence | |
| 613da6f3-3bc1-43f6-a565-bff1d6bc9b74 | < 5.0.12 |
MEDIUM | 5.3 | The Team β Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing cap… | — | wordfence |
| 61337d2d-d15a-45f2-b730-fc034eb3cd31 | < 2.11.1 |
MEDIUM | 5.3 | The Ultimate Member β User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plu… | — | wordfence |
| 61293c20-cabe-412d-94d1-1d0326d35a46 | MEDIUM | 5.3 | The Secufor_OAuth plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.7.… | — | wordfence | |
| 61279ddc-92cc-4181-ba23-7de1464a9dec | < 1.4.3 |
MEDIUM | 5.3 | The Royal MCP β Secure AI Connector for Claude, ChatGPT & Gemini plugin for WordPress is vulnerable to unauthorized ac… | — | wordfence |
| 61055b07-8dec-4fd7-a7a8-2642fa347d9d | MEDIUM | 5.3 | The Bulk theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all… | — | wordfence | |
| 61022086-608d-4980-ad8e-185bb59a707c | < 2.14.0 |
MEDIUM | 5.3 | The HurryTimer β An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerabl… | — | wordfence |
| 60e9351a-302b-4a31-8a9c-c0a0b6ee3fcd | < 1.11.4 |
MEDIUM | 5.3 | The Captcha/Honeypot for Contact Form 7 plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and incl… | — | wordfence |
| 60e3a506-8811-4e7d-a16c-02f91c757705 | < 2.1.17 |
MEDIUM | 5.3 | The Custom Fonts β Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a mi… | — | wordfence |
| 60cae255-29ca-455f-a8ce-2079251884e4 | < 1.54 |
MEDIUM | 5.3 | The Civic Cookie Control plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on … | — | wordfence |
| 60c8159f-0641-4b75-9d56-34bd13105caf | < 4.15.19 |
MEDIUM | 5.3 | The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi… | — | wordfence |
| 6091faeb-f8a0-40f3-963c-6c5814219832 | < 6.0 |
MEDIUM | 5.3 | The phpinfo() WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi… | — | wordfence |
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →