πŸ›‘οΈ WordPress Vulnerability Database

Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.

40,389
Total CVEs
66
CISA KEV (Actively Exploited)
Aug 28, 2026
Last Updated

40,389 vulnerabilities found (page 1224 of 1616)

CVE IDPlugin / ThemeSeverityCVSSDescriptionFixed InSource
1d2ebbc4-dc8b-47e5-b8d9-758424de4426
< 2.3.0
MEDIUM 5.3 The WP 2FA plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.2.1 … wordfence
1d2a2032-3d39-4195-8e6c-ab884164721a
< 3.6.4.2
MEDIUM 5.3 The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vul… wordfence
1cfe6f79-d5af-4f63-9f6a-39ae34f150e8 MEDIUM 5.3 The Make My Trivia plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a func… wordfence
1cee38cd-b36b-4e3e-bfc6-3c6de18fda33 MEDIUM 5.3 The StaffList plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,… wordfence
1ce1316b-674a-4436-968f-9ffca4e8f726
< 5.16.2
MEDIUM 5.3 The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions… wordfence
1cdfbc7a-e3c2-44c1-af83-b2b78be01e5e
< 2.0.4
MEDIUM 5.3 The Tag Groups is the Advanced Way to Display Your Taxonomy Terms plugin for WordPress is vulnerable to unauthorized acc… wordfence
1cd5fa89-ed3b-4ac1-9200-9f5eb26cb534 MEDIUM 5.3 The CGC Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… wordfence
1cc8c6f2-c38c-4e41-8c16-bb18fc5755bd
< 6.5.7
MEDIUM 5.3 The Display Eventbrite Events plugin for WordPress is vulnerable to unauthorized access due to a missing capability chec… wordfence
1cbc482f-25b2-4709-8e6a-426fcd5b9fe0
< 2.7.15
MEDIUM 5.3 The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to unauthorized ac… wordfence
1cb488d7-8b9d-440d-a04b-834639845eb4
< 0.9.3
MEDIUM 5.3 The Link Whisper Free plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a f… wordfence
1c9266b8-cf27-4a55-ae5a-0beda19f0fbf
< 1.6.29
MEDIUM 5.3 The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to invalid rating in … wordfence
1c8fe389-ff44-4be3-889b-0006977f4f3c
< 2.3.6
MEDIUM 5.3 The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit… wordfence
1c8de019-4ec1-49fd-9b0b-c2b1b6908ba8 MEDIUM 5.3 The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wp_ajax… wordfence
1c8b8391-8d18-49ad-a5ee-2ba7a9090e6b
< 1.5.4
MEDIUM 5.3 The Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin for WordPress is vulnerable to unauthorized ac… wordfence
1c4fcaa5-357a-4b70-8653-3874a234f07d
< 5.4.4
MEDIUM 5.3 The kk Star Ratings plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.4.3. T… wordfence
1c2b9858-eb0c-42bd-bc32-c58c0f809fc8
< 1.1.10
MEDIUM 5.3 The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification … wordfence
1c220091-4094-4f72-aaf1-a426f07aef5b
< 10.30.12
MEDIUM 5.3 The Salon Booking System Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check… wordfence
1c0d18d3-8758-41ae-b104-dac69eee4ac9
< 1.1.2
MEDIUM 5.3 The TH Side Cart and Menu Cart for Woocommerce plugin for WordPress is vulnerable to unauthorized plugin settings update… wordfence
1c09fa88-8981-414e-ad24-7460b81ea295
< 3.14.0
MEDIUM 5.3 The Seriously Simple Podcasting plugin for WordPress is vulnerable to unauthorized access due to a missing capability ch… wordfence
1befba2d-cd16-48d1-8499-d848a649cf9d
< 1.3.3
MEDIUM 5.3 The Spa and Salon theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a functi… wordfence
1bbbec13-50ea-4dd1-ab6e-f44814813edb
< 1.2.8
MEDIUM 5.3 The Book Landing Page theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a fu… wordfence
1bb25412-8f63-4a9d-84bd-44fac59c6eed
< 1.1.8
MEDIUM 5.3 The YourMembership Single Sign On – YM SSO Login plugin for WordPress is vulnerable to unauthorized access of data due… wordfence
1b9f3e68-b069-4f41-87a1-ffaa287215b9
< 6.11.6
MEDIUM 5.3 The Simple:Press Forum plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on th… wordfence
1b8d866e-e187-4ff5-bed7-b03e2a213c11
< 4.4.5
MEDIUM 5.3 The Church Admin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che… wordfence
1b847857-5dc9-4793-b9d6-759f27377fe3
< 2.2
MEDIUM 5.3 The Void Elementor Post Grid Addon for Elementor Page builder plugin for WordPress is vulnerable to unauthorized modific… wordfence
← Prev 1221 1222 1223 1224 1225 1226 1227 Next →

Is your WordPress site affected?

EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.

Scan My Website →
Scroll to Top