πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,383
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 27, 2026
Last Updated

40,383 vulnerabilities found (page 1206 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
3d3d4fe5-bb87-42e0-b54c-f550ccebf944
< 8.2.2
MEDIUM 5.3 The PayPlus Payment Gateway plugin for WordPress is vulnerable to order payment manipulation in all versions up to, and … wordfence
3d3b090a-71a3-4430-871d-f19ee1033e01
< 1.5.1
MEDIUM 5.3 Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) w… wordfence
3d191211-d02b-4808-8d92-c9a906117cde
< 3.0.7
MEDIUM 5.3 The Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor plugin for WordPress is vulnerable to unauthorized a… wordfence
3d16e4a9-c8d3-49af-ac1f-1857f4b30d73
< 1.4.7
MEDIUM 5.3 The Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin for WordPress is … wordfence
3d10d7b5-1995-483a-8502-74bc912f6b0e
< 4.6.3
MEDIUM 5.3 The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payme… wordfence
3d0d4680-4e86-42a7-a045-0663d1d9830b MEDIUM 5.3 The Site Notify plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functio… wordfence
3cd9569f-3cda-4482-8ccd-c3f362b4e651
< 2.8.5
MEDIUM 5.3 The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c… wordfence
3cd7be2c-9ba9-4d25-8907-610898df5834
< 6.7.55
MEDIUM 5.3 The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and includ… wordfence
3cd2b2ba-c4ec-4799-91b4-b38c462baee4
< 2.5.6
MEDIUM 5.3 The Participants Database plugin for WordPress is vulnerable to unauthorized manipulation of data due to a missing capab… wordfence
3cc6aa06-ab2a-4d5c-bbbe-4c19722ccc53
< 8.6.0
MEDIUM 5.3 The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the … wordfence
3cbf52b0-4c7f-40fb-aedb-4c70f6510b1b
< 4.9.9.1
MEDIUM 5.3 The Newsletters plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.9.9. … wordfence
3cbd58da-3d72-4b8c-add9-c38afc6fa3d0
< 2.1.4
MEDIUM 5.3 The FormsDB – Save Elementor Forms to Google Sheets & Post Type plugin for WordPress is vulnerable to unauthorized acc… wordfence
3cba908f-c7e3-4b4f-be73-8682fa1f231b
< 1.5.7
MEDIUM 5.3 The Xpro Addons For Beaver Builder – Lite plugin for WordPress is vulnerable to unauthorized access due to a missing c… wordfence
3cb869dd-c8cf-4849-a13f-6c8cf1c196b6
< 1.1.1
MEDIUM 5.3 The PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer plugin for Wo… wordfence
3cb809c9-7167-4333-969f-0141c96342bd
< 2.0.25
MEDIUM 5.3 The MarketKing β€” Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthori… wordfence
3c9953b3-dd09-4c80-be11-4daf3bbac720
< 1.3.22
MEDIUM 5.3 The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to… wordfence
3c926145-f0b5-44cf-bea6-e9bdf6e8e687
< 0.12.4
MEDIUM 5.3 The WPGraphQL WooCommerce plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 0… wordfence
3c6f30bb-dec0-4776-b255-bb88c9d003c2
< 4.0.16
MEDIUM 5.3 The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized… wordfence
3c584f15-34ab-4577-a94d-d0976cc06f3a
< 2.3
MEDIUM 5.3 The WP Menu Image plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch… wordfence
3c45283c-0839-4cad-b7b2-5170e65defca
< 1.19.4
MEDIUM 5.3 The NitroPack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function … wordfence
3c18d155-9c9d-4ffa-8faa-09bb67406266
< 7.4.0
MEDIUM 5.3 The AI ChatBot – WPBot for Live Support and Lead Generation plugin for WordPress is vulnerable to unauthorized access … wordfence
3c054aba-0da6-4884-a653-d8e13762d038 MEDIUM 5.3 The G5Plus April theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a functio… wordfence
3bf91044-41d8-4587-b35e-2a3efd384f57
< 1.2.6
MEDIUM 5.3 The Preschool and Kindergarten theme for WordPress is vulnerable to unauthorized access due to a missing capability chec… wordfence
3becd450-b0de-466a-9721-b156a2ba1de3 MEDIUM 5.3 The WP-RecentComments plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and includ… wordfence
3be0e82c-f9a8-42a5-9abb-24cc60e03944
< 3.5
MEDIUM 5.3 The Greeklish-permalink plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil… wordfence
← Prev 1203 1204 1205 1206 1207 1208 1209 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top