πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,383
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 27, 2026
Last Updated

40,383 vulnerabilities found (page 1216 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
2ae8e4ca-f5bc-40ae-ad00-efceac29458e
< 1.5.5
MEDIUM 5.3 The AnyTrack Affiliate Link Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capabilit… wordfence
2ac09e78-fea1-478f-a3bc-40742bdc0f6a
< 2.1.0
MEDIUM 5.3 The Master Addons For Elementor – White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPr… wordfence
2ab4baab-9e91-4ed5-9749-4a14e8180e71 MEDIUM 5.3 The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of dat… wordfence
2a83ade5-5e53-4d53-ada0-43d487e5e23f
< 1.4.3
MEDIUM 5.3 The WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce plugin for WordPress is vulnera… wordfence
2a700c1c-2ac2-47b8-95e6-ee1a02f50c12
< 9.3.3
MEDIUM 5.3 The WP Cerber Security plugin for WordPress is vulnerable to security protection bypass in versions up to, and including… wordfence
2a690565-d401-4c71-8ca2-c9a10468e870
< 1.0.83
MEDIUM 5.3 The BookingPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che… wordfence
2a6417bc-3f9a-4271-8ca1-bbc55cdc63c6
< 1.1.3
MEDIUM 5.3 The Ridhi theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in ve… wordfence
2a5a7fa2-856e-47e2-9e32-95d5f50d7b2d
< 3.3.5
MEDIUM 5.3 The YayCurrency – WooCommerce Multi-Currency Switcher plugin for WordPress is vulnerable to Sensitive Information Expo… wordfence
2a4bd32b-ab84-4668-a53c-960b42142968 MEDIUM 5.3 The Quick Interest Slider plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on… wordfence
2a4289b1-ca9f-4045-a00f-50eba713b52f
< 0.9.1
MEDIUM 5.3 The Link Whisper Free plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a f… wordfence
2a13ce09-b312-4186-b0e2-63065c47f15d
< 3.16.0
MEDIUM 5.3 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in al… wordfence
2a132817-d3c1-4460-8852-5ab2f7481532 MEDIUM 5.3 The Sermon Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a func… wordfence
2a121c1f-49a7-4ce9-a2a9-81c0c4baf3d4
< 1.0.48
MEDIUM 5.3 The OnPay.io for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check… wordfence
2a10d77f-78f4-403e-a77f-1243d671ece9
< 2.9.2
MEDIUM 5.3 The Floating Buttons for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capabili… wordfence
2a0cbfe8-8e17-480f-8bcd-39aa06a16415
< 3.6
MEDIUM 5.3 The Tuturn - Online Tutors Marketplace WordPress Theme plugin for WordPress is vulnerable to unauthorized access due to … wordfence
29f3be0b-c91b-4dd3-a37f-ecda8a5d2d90
< 2.3.3
MEDIUM 5.3 The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable … wordfence
29de766d-5e7e-46b4-acac-feec5b33589e
< 4.0.12
MEDIUM 5.3 The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, … wordfence
29b09367-6a27-4024-a71c-233aaee6c310
< 0.6.4
MEDIUM 5.3 The Link Whisper Free plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability chec… wordfence
299ae409-42a5-411f-927b-e58d21449263
< 1.1.8
MEDIUM 5.3 The JobScout theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in… wordfence
2990b307-2b07-4daf-917b-d9587253cbeb
< 2.4.3
MEDIUM 5.3 The Constant Contact Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a… wordfence
298a1927-118c-4dca-a783-9cc7e94d0b07
< 1.2.12
MEDIUM 5.3 The WP Time Slots Booking Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabi… wordfence
2950465d-a030-4003-8751-c93e3a678eb1 MEDIUM 5.3 The Salon Booking System – Free Version plugin for WordPress is vulnerable to unauthorized access in versions up to, a… wordfence
293260d1-84a3-4af7-a293-8466624c86cc
< 1.3.5
MEDIUM 5.3 The The Tribal Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in… wordfence
2931fda2-edc8-44ea-9fff-ae9d94aa01bf
< 1.3.8
MEDIUM 5.3 Multiple WPOnlineSupport plugins for WordPress are vulnerable to unauthorized modification of data due to a missing capa… wordfence
29289ca2-ea70-4a42-b83e-43f976b88061
< 3.6.12
MEDIUM 5.3 The Sunshine Photo Cart plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a… wordfence
← Prev 1213 1214 1215 1216 1217 1218 1219 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top